https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7374
--- Comment #30 from Guy Harris <guy@xxxxxxxxxxxx> 2012-06-29 12:09:49 PDT ---
WMI might not report device arrival and departure indications on Windows.
What we *really* want are indications that a new device gets attached to the
WinPcap driver or an existing device gets removed from the WinPcap driver, as
what we really care about is "what devices can I *capture* on?"
If we were to have separate NDIS 5 drivers (for NT 5, i.e. W2K/WXP and their
server equivalents) and NDIS 6 drivers (for NT 6, i.e. Vista/7/8 and their
server equivalents), with the NDIS 6 driver being a filter driver (which I
think is what's called a "lightweight filter driver" in some places), I *think*
the filter driver's FilterAttach routine would be called when a lower-level
network device is attached to the filter driver and its FilterDetach routine
would be called when it's detached from the filter driver, so we could perhaps
have a device that delivers "new device" and "device gone" indications - it
could perhaps also supply the list of interfaces used by pcap APIs that deliver
lists of interfaces, such as pcap_findalldevs().
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.