基于NDIS中间层的协议转换

Frame Format Conversion based on NDIS

Windows网络驱动程序接口规范为开发者在操作系统内核模式下处理网络数据提供了标准的开发接口。这套标准应用程序接口(API)由微软提供,它支持计算机通过不同的通信协议实现网络相连,如:TCP/IP、IPX、NetBIOS、AppleTalk等。按照网络驱动程序的特点及Windows驱动程序的开发规则,这里给出了一个能实现网络协议数据拦截、不同网络协议格式转换和转发的方案。方案包括网络驱动程序接口规范简介、帧格式规范描述、转换策略设置、数据拦截、协议转换、ARP欺骗等方面的内容。该方案能有效地实现Windows平台下不同网络协议数据格式转换。通过给出的以IP协议为范例的实现方案,人们能较为容易地扩展其他应用,以达到实现各种特定需求的目的。

Windows network driver interface specification provides a standard development interface for developers to deal with the network data in system kernel mode. This set of standard API （application programming interface）, provided by Microsoft, could support computer in implementing network connection via different communication protocols, such as TCP/IP, IPX, NetBIOS, AppleTalk, and so on. In accordance with the characteristics of the network drivers and Windows driver development rules, a scheme capable of implementing network protocol data interception, different network protocol format converting and forwarding is proposed. The scheme description involves the network driver interface specification profile, frame format specification, conversion policy settings, data interception, protocol conversion and ARP spoofing. This scheme could effectively achieve protocol data format conversion of different network protocols under Windows platform. With IP protocol implementation as an example, it is proved that this scheme could be more easily extended to other applications, thus realizing the purpose of various specific needs.