NDIS resources

[ 1] Simple NDIS Hooking Based Firewall for NT4/2000
  http://ntdev.h1.ru/ndis_fw.html
  http://ntdev.h1.ru/ndis_fw.zip

[ 2] Simple TDI-Based Open Source Personal Firewall for Windows NT4/2000/XP/2003
  http://sourceforge.net/projects/tdifw
  http://optusnet.dl.sourceforge.n ... ifw/tdifw-1.3.2.zip

[ 3] http://dream.net9.org/~driver/restrict/PCAUSA/pcausa.zip(非最新版)

[ 4] Firewall for Windows 9x/ME/NT/2000/XP - Vadim V.Smirnov
  http://www.ntkernel.com/articles/firewalleng.shtml

[ 5] How to implement a Firewall-Hook Driver(cool and undocumented)
  http://www.codeproject.com/internet/FwHookDrv.asp
  http://www.codeproject.com/internet/FwHookDrv/FwHookDrv_src.zip

[ 6] Windows Network Data And Packet Filtering Frequently Asked Questions(这里有一张Network Architecture Diagram)
  http://www.pcausa.com/resources/winpktfilter.htm

[ 7] Network Architecture in Windows NT-based Operating Systems
  http://plasmic.com/~vizzini/ntnetarch.html

[ 8] Ntpacket.exe: Updated Windows NT 4.0 NDIS 3.0 Packet Sample Available
  http://support.microsoft.com/default.aspx?scid=kb;EN-US;238652
  ftp://ftp.microsoft.com/Softlib/MSLFILES/Ntpacket.exe

  Bugs in the NT DDK Packet Protocol Driver Sample
  http://www.panix.com/~perin/packetbugs.html

[ 9] EthernetSpy
  http://telemat.det.unifi.it/book/EthernetSpy/EthernetSpy.zip

[10] BriProto NDIS Protocol Driver Project Files
  http://adaptive4.ucsd.edu/projec ... 2003.08.01.1218.zip
  http://adaptive4.ucsd.edu/projects/briproto_driver/doc/

[11] A RARP Server(source code)
  http://www.panix.com/~perin/rarpd.zip

[12] NDIS "Packet" Discussion(介绍了NDIS_PACKET、NDIS_BUFFER)
  http://www.pcausa.com/resources/ndispacket.htm
  http://www.pcausa.com/resources/ndispacket_decode.htm
  http://www.pcausa.com/resources/readonpacket.htm

  NDIS_PACKET Discussion Part 2 - NDIS_PACKET Reserved Areas
  http://www.ndis.com/papers/ndispacket/ndispacket2.htm

[13] Workaround To Circumvent ProtocolReceive Faults Caused By Some Faulty NDIS Miniport Drivers
  http://www.pcausa.com/support/KB03080201.htm

[14] Conditions Needed For ReceivePacketHandler To Be Called
  http://www.pcausa.com/support/KB07130001.htm

[15] http://www.rhyshaden.com/ethernet.htm(介绍了802.1p的帧格式)

[16] NDIS Driver Compile Flags - Stephan Wolf[2004-03-15]
  http://www.wd-3.com/031504/NDISCompile.htm

[17] KNOWLEDGE BASE LINKS STOP MESSAGES(理解BSOD)
  http://aumha.org/win5/kbestop.htm

[18] Stop 0x0000000A or IRQL_NOT_LESS_OR_EQUAL(介绍了Stop Message的四个参数)
  http://www.microsoft.com/resourc ... s/prmd_stp_hwpg.asp

[19] Kernel Driver Frequestly Asked Questions (FAQ)
  http://www.osronline.com/custom. ... rint.cfm&id=256

[20] INFO: Network Binding Analysis
  http://support.microsoft.com/default.aspx?scid=kb;en-us;192483

[21] Windows 2000 Filter-Hook Driver example
  http://ntdev.h1.ru/ipfilter.html
  http://ntdev.h1.ru/ipfilter_src.html

[22] 用VC开发Win2000/XP下的防火墙
  http://computer.sz.net.cn/2004-05-17/nw2004051700070.shtml
  http://computer.sz.net.cn/2004-05-17/nw2004051700071.shtml
  http://computer.sz.net.cn/2004-05-17/nw2004051700072.shtml
  http://dl2.mydown.com/code/more/DrvFltIp_FirewallFHK.rar

[23] Simple Packet Filtering Firewall - Deepthi Reddy, Ramya Balakumar, Vandana Bhardwaj
  http://www.csc.villanova.edu/~vbhardwa/netclass/firewall.ppt
  http://www.sju.edu/~vb189802/computerNet/fire.zip(source code)

  Simple packet Filter Firewall
  http://www.csc.villanova.edu/~vbhardwa/netclass/Firewall.htm

[24] Developing Firewalls for Windows 2000/XP
  http://www.codeproject.com/internet/drvfltip.asp
  http://www.codeproject.com/internet/drvfltip/FirewallFHK_src.zip
  http://www.codeproject.com/internet/drvfltip/DrvFltIp_source.zip

[25] Simple Packet - Filter Firewall
  http://www.codeproject.com/internet/smfirewall.asp
  http://www.codeproject.com/internet/smfirewall/fire.zip

[26] Hollis Technology Solutions IpHook Version 1 Release
  http://www.hollistech.com/Resources/IpHook/Release%20Notes.htm
  http://www.hollistech.com/Resources/IpHook/IpHook.msi(source code)

[27] An Easy Firewall Application - [2003-10-06]
  http://www.codeproject.com/tools/firewallpapi.asp
  http://www.codeproject.com/tools/firewallpapi/firewallpapisrc.zip
  http://www.codeproject.com/tools/firewallpapi/firewallpapi.zip

[28] NetCenturion is a TCP/IP packet filter for Windows 2000 and XP
  http://www.softsystem.co.uk/page5.html
  http://www.softsystem.co.uk/NetCenturion1204.zip
  http://www.softsystem.co.uk/NetCenturion1204src.zip

[29] Extending The Microsoft PassThru NDIS Intermediate Driver - Thomas F. Divine <wd-3.tdivine@pcausa.com> [2003-07-15]
  Part 1 Adding a DeviceIoControl Interface
  http://www.wd-3.com/archive/ExtendingPassthru.htm
  http://www.wd-3.com/downloads/ExtendingPassthru.zip

  Extending The Microsoft PassThru NDIS Intermediate Driver - James Antognini <antognini@mindspring.com> Thomas F. Divine <wd-3.tdivine@pcausa.com> [2003-12-15]
  Part 2 Two IP Address Blocking NDIS IM Drivers
  http://www.wd-3.com/archive/ExtendingPassthru2.htm
  http://www.wd-3.com/downloads/PassThru2.zip

[30] NDIS Driver Debugging Guidelines - [2003-05-05]
  http://www.microsoft.com/taiwan/ ... NDIS/ndisdebug.mspx
  http://download.microsoft.com/do ... /ndisWinHec2003.doc
  (用kd调试)

  Debugging NDIS Drivers
  http://msdn.microsoft.com/librar ... .xml.asp?frame=true

  NDIS Debug Tracing and Kernel Debugger Extensions - [2003-11-20]
  http://support.microsoft.com/kb/q248413/

  How to enable NDIS debug tracing - [2005-08-09]
  http://support.microsoft.com/kb/q164459/

  如何启用和使用NDIS验证程序 - [2005-12-23]
  http://support.microsoft.com/kb/q266403/

[31] Porting Miniport Drivers to NDIS 6.0 - [2005-04-19]
  http://www.microsoft.com/taiwan/ ... S/NDIS6drvport.mspx
  http://download.microsoft.com/do ... e6/NDIS6drvport.doc

[32] 基于PassThru的NDIS中间层驱动程序扩展 - Addylee <Addylee2004@163.com> [2006-05-02]
  http://www.xfocus.net/articles/200605/865.html

[33] PCAUSA Discussion List
  http://groups.yahoo.com/group/discussion-pcausa/

[34] Controlling Stacking Order of NDIS 5.0 Intermediate Drivers - [2003-12-17]
  http://support.microsoft.com/kb/250615

[35] NAT在NDIS中间层驱动中的实现 - thinking <thinkingfh@163.com> [2006-06-17]
  http://www.xfocus.net/articles/200606/870.html

[36] Raw Ethernet Packet Sending - miahrugger [2003-10-25]
  http://www.codeproject.com/cs/internet/sendrawpacket.asp
  http://www.codeproject.com/cs/in ... t/SendRawPacket.zip
  (用到了NDIS Protocol Driver)