Submit My Question - Recent Questions - Recent Answer
Msdn Tech >> Windows Networking Development >> Windows Filtering Platform (WFP)

Can WFP inspect ARP packets ?

We need inspect ARP packets to detect ARP poisoning. Does WFP support this?

If not, should I use the new NDIS6.0 filter driver? And where can I ask questions about NDIS filter driver?

[204 byte] By [MartinKin] at [2008-3-7]
«« Cascading Date for Filter
»» Host restart failure
# 1

Hi,

currently WFP does not support ARP packet filtering. You may want to look into Ndis Lightweight Filters (LWF) for ARP poisoning detection.

I think you can send Ndis questions to microsoft.public.development.device.drivers.

Thanks,

Biao.W.

BiaoWang[MSFT] at 2007-10-3 > top of Msdn Tech,Windows Networking Development,Windows Filtering Platform (WFP)...
Windows Networking Development
Windows Filtering Platform (WFP)

Windows Networking Development Hot Topic

Windows Networking Development New Topic

Windows Networking Development

Java / MSDN / Linux Tech / PHP Tech / MSDN DotNet / MSDN TECH / Health Library / Programmers Tech / visual basic Tech / Developer Tech / Ipod faqs / Msdn China Tech

Site Classified