【摘要】 NDIS是一种网络协议规范,它支持三种类型的网络驱动程序:网卡驱动程序、中间驱动程序、协议驱动程序。DDK是MICROSOFT发布的开发WINDOWS核心层驱动程序的工具。文章主要讨论在WIN2K环境下利用NTDDK开发中间驱动程序,并且利用该驱动程序拦截IP包。以及在WIN2K环境下,用户程序是如何与核心层驱动程序进行通话的。更多还原

【Abstract】 NDIS is a kind of network protocol standard which supports the network drivers of three kinds:NIC drivers, intermediate drivers and protocol drivers. DDK is the development WINDOWS core tool of a layer of drivers that MICROSOFT is issued. This paper discusses how to use NTDDK to develop intermediate drivers under environment of WIN2K and Intercepts IP packet with this driver. We also discuss how to communicate between user mode and kernel mode under environment of WIN2K.更多还原