Capturing Ethernet frames from NIC directly

[Abushaar]

I am looking for C++ code to read and send frames directly from/to NIC. I don’t want the gram to reach the window network kernel. 

[Andrey_Dmitriev]

---

@Abushaar wrote:

I am looking for C++ code to read and send frames directly from/to NIC. I don’t want the gram to reach the window network kernel. 

---

This is what Wireshark  software does

Ethernet capture

Packet Capture (Npcap)

pcap — Npcap API

Just curious - do you need to do the same directly from LabVIEW?

[Abushaar]

As far as I know, Wireshark take a copy of the packet. The packets will keep going to windows network kernel. 
what I want is to redirect all the received frames to my code similar to what firewall does.

[Andrey_Dmitriev]

---

@Abushaar wrote:

As far as I know, Wireshark take a copy of the packet. The packets will keep going to windows network kernel. 
what I want is to redirect all the received frames to my code similar to what firewall does.

---

It is a hard task, you have to develop something like NDIS Intermediate Driver to hook on the traffic. May be it will be more simple to capture packets before Windows Firewall (I guess NPcap shall be able to do that as long as Wireshark can), and then simply block traffic with standard Windows Firewall as you like. Alternative approach is to make something like proxy, if the sender and receiver can be configured to use different ports, then you can communicate with both and stay in the middle like client/server, then block or not the packets depend on your rules. This can be simply done in LabVIEW.

[Abushaar]

Thank you for your reply. Capture packet is fine to me. But does NPcap intercept the packet or just take a copy(sniffing) of the packet?  I don’t want the packet to reach window network Kernel. 

[Andrey_Dmitriev]

---

@Abushaar wrote:

Thank you for your reply. Capture packet is fine to me. But does NPcap intercept the packet or just take a copy(sniffing) of the packet?  I don’t want the packet to reach window network Kernel. 

---

As far as I can see on internet - no, the Pcap will take a copy, but will not block packets for further propagation, here you need to design and develop your own driver, act as self-made firewall. But here we are at a very low level, this is not related to LabVIEW at all.