![]() While Winsock is a user mode library, it uses a kernel mode driver, called Ancillary Function Driver (AFD) to implement certain functionality. Datagram sockets are used for UDP, whereas Stream sockets are for TCP. The networking API is exposed via three components: Winsock A user mode API for abstracting network communication using sockets and ports. Each layer can accommodate Windows Filtering Platform (WFP) shims, which allows packets at that layer to be introspected and also host the WFP Callout API. And the Data link layer (also called Framing layer) implements 802.3, 802.1, PPP, Loopback and tunnelling protocols. At the Network layer, IPv4 and IPv6 protocols are implemented in a dual-stack architecture. ![]() The Transport layer includes implementations for TCP, UDP and unformatted RAW protocols. The network stack, implemented in tcpip.sys implements the Transport, Network and Data link layers of the TCP/IP model. The Next Generation TCP/IP stack connects to NICs via a Network Driver Interface Specification (NDIS) driver. ![]() Architecture of the Next Generation TCP/IP stack
0 Comments
Leave a Reply. |