Can I change packets and their size? Can I inject new packets into the data-stream? What OS platforms are supported? What packet types will I see in my user-land application? Is kernel processing involved? Can I query interface parameters? How will my appliation interface to the Toolkit? Can I intercept dial-up connections?

Can I change packets and their size? Yes. You can change packets in any direction, including their size, headers, data content, MAC address, etc.

Can I inject new packets into the data-stream? Yes. You can create raw IP packets and provide them to the Toolkit, in any direction.

What OS platforms are supported? Windows 2000, 2003, XP (32 and 64 bit), Vista (32 bit); Linux kernels supported: 2.4.x and 2.6.x; distributions supported: Red Hat 7.2+; Red Hat Enterprise 3.x, 4.x; Fedora Core 1 to 6; Fedora 7; Debian Sarge; OpenSuSE 10.x; Mandrake 10; Slackware 9.x; OS/2 Warp 4.0, WSeB, eComStation 1.x, and FreeBSD support to be announced (available on demand).

What packet types will I see in my user-land application? The NDIS Toolkit provides IP packets, ARP packets and PPPoE packets (by default) to the user-land application. The packets include the 14 byte MAC header.

Is kernel processing involved? Yes. Our intermediate driver get packets from kernel-space and puts them into a queue that is readable in user-land — in the same way you read from a file.

Can I query interface parameters? Yes. The NDIS Toolkit allows you to query information about any monitored interface, including the MAC address, IP address, the interface name and netmask.

How will my appliation interface to the Toolkit? The Toolkit is implemented as a loadable module. on Windows and OS2, the application interface is a Dynamic Link Library (DLL). On Linux and FreeBSD, the application-interface is a shared library (SO). The C function API interface is the same across platforms.

Can I intercept dial-up connections? Yes. However at the moment, only the Windows NDIS Toolkit supports dial-up interface traffic intercepting.