AgentSmithers
October 26th, 2009, 02:55 PM
I know in XP SP2 they applyed the no RAW with TCP Header to stop spoofing of TCP protocol, dose this apply to only usermode or both to usermode and kernel mode sys driver?
Click to See Complete Forum and Search --> : Raw tcp
FilipDimitrov1967
October 28th, 2009, 08:42 AM
I don't know for user mode, but for sure in kernel mode they cannot disable this.
Perhaps this depends on kernel mode driver...check OSI model :
http://en.wikipedia.org/wiki/OSI_model
Perhaps this depends on kernel mode driver...check OSI model :
http://en.wikipedia.org/wiki/OSI_model
AgentSmithers
October 30th, 2009, 03:05 PM
ANyone know for sure?
MrViggy
October 30th, 2009, 03:45 PM
The MSDN:
http://msdn.microsoft.com/en-us/library/ms740548%28VS.85%29.aspx
Scroll to the bottom.
Viggy
http://msdn.microsoft.com/en-us/library/ms740548%28VS.85%29.aspx
Scroll to the bottom.
Viggy
AgentSmithers
October 30th, 2009, 09:55 PM
I've Read this! And is not 100% Winpcap for example overcome these limitations, Thankyou for your reply though.
codeguru.com
Copyright Internet.com Inc., All Rights Reserved.
Copyright Internet.com Inc., All Rights Reserved.