winpkFilterDriver.GetNetworkDevices() returns no device

[clw-helb]

When running the WinpkFilterDriver(ndisapi)-example the method GetNetworkDevices returns no device.
What could be the reason for this?
And yes: I manually build/copied ndisapi.dll (from https://github.com/wiresock/ndisapi ) into the build folder

Thx in advance
Clemens

[kayoub5]

The fact that you copied the DLL, means you already did something wrong.

You need to use the installer https://github.com/wiresock/ndisapi/releases

[clw-helb]

Hi Ayoub,
I have Wiresock installed.
api.Version returns 4294967295.
Also when invoking "directly"
_ndisApi.GetTcpipBoundAdaptersInfo()
via ndisApi (NdisApiDotNet) I do get my network devices

[kayoub5]

@clw-helb paste the full code you are using

[clw-helb]

it's the WinpkFilterExample ;-)

If you mean the "direct ndisapi" Code, then:

using NdisApi; // the ndisapi.net.dll
...
public class WinpkFilterTest
{
    private NdisApiDotNet _ndisApi = new NdisApiDotNet(null);

    public Collection<string> GetAllDevices()
    {
        var adapterList = _ndisApi.GetTcpipBoundAdaptersInfo();
        if (!adapterList.Item1)
        {
            Console.WriteLine("WinpkFilter failed to query active interfaces. Exiting.");
        }
        Collection<string> deviceList = new Collection<string>();
        foreach (var adapter in adapterList.Item2)
        {
            var adapterName = adapter.Name;
            var adapterFriendlyName = adapter.FriendlyName;
            deviceList.Add(adapterFriendlyName);
        }

        return deviceList;
    }
}

[kayoub5]

The code that uses GetNetworkDevices

[clw-helb]

The code that uses GetNetworkDevices

as I said: it's the SharpPcap WinpkFilterExample "as is"

[kayoub5]

Could you debug https://github.com/dotpcap/sharppcap/blob/master/SharpPcap/WinpkFilter/WinpkFilterDriver.cs#L66 and check returned value of adapterList ?

[clw-helb]

adapterList is empty, adapterList.AdapterCount == 0

[kayoub5]

GetTcpipBoundAdaptersInfo is a function driver, we have little control over its behavior, things to consider

• Run application as admin
• Cross check if you are using x64 or x86

[clw-helb]

upfront: I appreciate your help

Run application as admin

doesn't change the behaviour

Cross check if you are using x64 or x86

x64

Interestingly: although having installed Windows Packet Filter x64, 3.6.1.1, I can run the example only if I place the ndisapi.dll in the build folder, eg
sharppcap\Examples\WinpkFilterExample\bin\x64\Debug\net8.0
If not, I get
System.DllNotFoundException: 'Unable to load DLL 'ndisapi.dll' or one of its dependencies: Das angegebene Modul wurde nicht gefunden. (0x8007007E)'

[kayoub5]

What's the return value of "GetTcpipBoundAdaptersInfo" ?

[clw-helb]

a tuple where Item1 is a boolean (I guess success) and Item2 is a collection of NdisApi.NetworkAdapter (see https://github.com/wiresock/ndisapi/blob/master/ndisapi.net/ndisapicl.h)

[kayoub5]

and what about the return value from the example?

[clw-helb]

as I said:
an empty TcpAdapterList

[kayoub5]

@clw-helb I can't reproduce the issue, and I have no control over what GetTcpipBoundAdaptersInfo returns.