Example Debug Trace

From PCATDIL TDI Filter Driver

The following is an example debug trace from the PassThru TDI Filter driver. In this example the PCATDIL local host is running the PCATTCP Winsock application. A remote workstation is using the PCATTCP Winsock application to send 16 8192-byte buffers via TCP.

 ================ Thu Apr 27 01:16:03 2000

NTICE: Load32 START=F71F0000  SIZE=C3A0  KPEB=80A4A480  MOD=PCATDIH

PCATDIH: Driver Entry...

PCATDIH: IPFilter_Attach Entry...

PCATDIH: TCPFilter_Attach Entry...

PCATDIH: UDPFilter_Attach Entry...

PCATDIH: RawIPFilter_Attach Entry...

NTICE: Load32 START=400000  SIZE=11000  KPEB=806A3600  MOD=pcattcp

TDIH_TdiOpenAddress: Process: "pcattcp.exe"

TDIH_TdiOpenAddressComplete: Status: 0x00000000

TDIH_TdiSetEvent: Hooking 2 event

TDIH_TdiSetEventComplete: Status: 0x00000000

TDIH_TdiSetEvent: Hooking 1 event

TDIH_TdiSetEventComplete: Status: 0x00000000

TDIH_TdiSetEvent: Hooking receive event

TDIH_TdiSetEventComplete: Status: 0x00000000

TDIH_TdiSetEvent: Hooking 5 event

TDIH_TdiSetEventComplete: Status: 0x00000000

TdiQueryInformation: ADDRESS_INFO

TDIH_TdiOpenConnection: Entry...

TDIH_TdiOpenConnectionComplete: Status: 0x00000000

TDIH_DefaultDispatch: Mapped DeviceControl To InternalDeviceControl

TDIH_TdiAssociateAddress: Entry...

TDIH_TdiAssociateAddressComplete: Status: 0x00000000

  Found TCPConn To Associate

  Found AddrObj To Associate

TDIH_TdiSetEvent: Hooking connect event

TDIH_TdiSetEventComplete: Status: 0x00000000

TDIH_TdiConnectEventHandler: Entry...

TDIH_ConnectEventHandler: Status: 0xC0000016

TDIH_TdiOpenConnection: Entry...

TDIH_TdiOpenConnectionComplete: Status: 0x00000000

TDIH_DefaultDispatch: Mapped DeviceControl To InternalDeviceControl

TDIH_TdiAssociateAddress: Entry...

TDIH_TdiAssociateAddressComplete: Status: 0x00000000

  Found TCPConn To Associate

  Found AddrObj To Associate

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 8192

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 568; BytesAvailable: 568; Flags: 0x00000620

TDIH_ReceiveEventHandler: Status: 0x00000000; Taken: 568

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 3668

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 712; BytesAvailable: 3632; Flags: 0x00000620

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 3632

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000e20

TDIH_ReceiveEventHandler: Status: 0x00000000; Taken: 1460

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC000021B; Taken: 0

TDIH_TdiReceive: Entry...

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 3668

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 712; BytesAvailable: 3388; Flags: 0x00000620

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 3388

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 8192

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 568; BytesAvailable: 568; Flags: 0x00000620

TDIH_ReceiveEventHandler: Status: 0x00000000; Taken: 568

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 3668

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 712; BytesAvailable: 2172; Flags: 0x00000620

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 2172

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 1784

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC000021B; Taken: 0

TDIH_TdiReceive: Entry...

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 3668

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 712; BytesAvailable: 4524; Flags: 0x00000620

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 4524

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 3668

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 712; BytesAvailable: 2172; Flags: 0x00000620

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 2172

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 2920

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 7624

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 8192

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 8192

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 8192

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 8192

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 8192

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 8192

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 8192

TDIH_TdiReceiveEventHandler: Entry...

  Bytes Indicated: 1460; BytesAvailable: 1460; Flags: 0x00000a20

TDIH_ReceiveEventHandler: Status: 0xC0000016; Taken: 0

  Returned STATUS_MORE_PROCESSING_REQUIRED

_I_TdiReceiveComplete: Final Status: 0x00000000; Bytes Transfered: 8192

TDIH_TdiSetEvent: Hooking connect event

TDIH_DefaultDispatch: Mapped DeviceControl To InternalDeviceControl

TDIH_TdiDisAssociateAddress: Entry...

TDIH_TdiSetEventComplete: Status: 0x00000000

TDIH_TdiDisAssociateAddressComplete: Status: 0x00000000

  Found TCPConn To DisAssociate

TDIH_TdiCloseConnection: Entry...

TDIH_TdiCloseConnectionComplete: Status: 0x00000000

  Found TCPConn For Close

TDIH_Close: Connection File

TDIH_DefaultDispatch: Mapped DeviceControl To InternalDeviceControl

TDIH_TdiDisAssociateAddress: Entry...

TDIH_TdiDisAssociateAddressComplete: Status: 0x00000000

  Found TCPConn To DisAssociate

TDIH_TdiCloseConnection: Entry...

TDIH_TdiCloseConnectionComplete: Status: 0x00000000

  Found TCPConn For Close

TDIH_Close: Connection File

TDIH_TdiCloseAddress: Entry...

TDIH_TdiCloseAddressComplete: Status: 0x00000000

  Found AddrObject For Close

TDIH_Close: Address File

NTICE: Unload32 MOD=pcattcp

TDIH_Unload: Entry...

PCATDIH: RawIPFilter_Detach Finished

PCATDIH: UDPFilter_Detach Finished

PCATDIH: TCPFilter_Detach Finished

PCATDIH: IPFilter_Detach Finished

TDIH_Unload: Exit!!!

NTICE: Unload32 MOD=PCATDIH