Main Page | Modules | Data Structures | File List | Data Fields | Globals | Related Pages

# dump.c File Reference

`#include <stdarg.h>`
`#include <ntddk.h>`
`#include <ntiologc.h>`
`#include <ndis.h>`
`#include "debug.h"`
`#include "packet.h"`
`#include "win_bpf.h"`

Go to the source code of this file.

## Functions
NTSTATUS | NPF_OpenDumpFile (POPEN_INSTANCE Open, PUNICODE_STRING fileName, BOOLEAN Append)
| Creates the file that will receive the packets when the driver is in dump mode.
NTSTATUS | NPF_StartDump (POPEN_INSTANCE Open)
| Starts dump to file.
VOID | NPF_DumpThread (POPEN_INSTANCE Open)
NTSTATUS | NPF_SaveCurrentBuffer (POPEN_INSTANCE Open)
| Saves the content of the packet buffer to the file associated with current instance.
NTSTATUS | NPF_CloseDumpFile (POPEN_INSTANCE Open)
| Closes the dump file associated with an instance of the driver.
NTSTATUS | PacketDumpCompletion (PDEVICE_OBJECT DeviceObject, PIRP Irp, PVOID Context)
VOID | NPF_WriteDumpFile (PFILE_OBJECT FileObject, PLARGE_INTEGER Offset, ULONG Length, PMDL Mdl, PIO_STATUS_BLOCK IoStatusBlock)
| Writes a block of packets on the dump file.

## Function Documentation

VOID NPF_DumpThread | ( | POPEN_INSTANCE | Open | ) |

| Definition at line 274 of file dump.c. References _OPEN_INSTANCE::DumpEvent, _OPEN_INSTANCE::DumpLimitReached, _OPEN_INSTANCE::DumpOffset, NPF_SaveCurrentBuffer(), and _OPEN_INSTANCE::Size.

NTSTATUS PacketDumpCompletion | ( | PDEVICE_OBJECT | DeviceObject,
|  | PIRP | Irp,
|  | PVOID | Context
| ) | `[static]`

| Definition at line 515 of file dump.c. Referenced by NPF_WriteDumpFile().

documentation. Copyright (c) 2002-2003 Politecnico di Torino. All rights reserved.