Tag Archives: API

Netio.sys – Pre Service Pack 3 Revision History for Windows Server 2008 SP2, Windows Vista SP2 and Windows Small Business Server 2008 (SBS 2008)

Netio.sys – Pre Service Pack 3 Revision History for Windows Server 2008 SP2, Windows Vista SP2 and Windows Small Business Server 2008 (SBS 2008)

11-May-2012 – 6.0.6002.22856 – Netio.sys – x86/x64 – http://support.microsoft.com/kb/2712746 – “0x00000019” Stop error when you run an SNMP application on a computer that is running Windows Vista or Windows Server 2008

12-Jan-2012 – 6.0.6002.22776 – Netio.sys – x86/x64 – http://support.microsoft.com/kb/2664888 – Computer stops responding when you run an application that uses the Windows Filtering Platform API in Windows 7, Windows Server 2008 R2, Windows Server 2008, or Windows Vista

05-Apr-2010 – 6.0.6002.22377 – Netio.sys – x86/x64 – http://support.microsoft.com/kb/981889 – A Windows Filtering Platform (WFP) driver hotfix rollup package is available for Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2

22-Mar-2010 – 6.0.6002.22369 – Netio.sys – x86/x64 – http://support.microsoft.com/kb/979223 – A nonpaged pool memory leak occurs when you use a WFP callout driver in Windows Vista, Windows 7, Windows Server 2008, or in Windows Server 2008 R2

23-Oct-2009 – 6.0.6002.22250 – Netio.sys – x86/x64 – http://support.microsoft.com/kb/976759 – WFP drivers may cause a failure to disconnect the RDP connection to a multiprocessor computer that is running Windows Vista, Windows Server 2008, windows 7 or Windows Server 2008 R2

[RESOLVED] Your computer may stop responding when you run an application, Software Firewall or anti-virus package that uses the Windows Filtering Platform API

Your computer may stop responding when you run an application, Software Firewall or anti-virus package that uses the Windows Filtering Platform API

This issue affects the following operating systems:

  • Windows 7 – Service Pack 1
  • Windows Small Business Server 2011 – Service Pack 1
  • Windows SBS 2011 – Service Pack 1
  • Windows Server 2008 R2 – Service Pack 1
  • Windows Small Business Server 2008 – Service Pack 2
  • Windows SBS 2008 – Service Pack 2
  • Windows Server 2008 – Service Pack 2
  • Windows Vista – Service Pack 2

In this situation, the computer may perform slowly or stop responding and network activity may be affected.  You find that a system restart may resolve this issue in some instances.

This issue occurs because the FwpsStreamInjectAsync0 function causes the interrupt request level (IRQL) to leak.  You can resolve the issue by updating to the latest Netio.sys driver.  The download link can be found within Microsoft KB 2664888 http://support.microsoft.com/kb/2664888

 

Windows Filtering Platform (WFP) General Description

Windows Filtering Platform (WFP) is a set of API and system services that provide a platform for creating network filtering applications. The WFP API allows developers to write code that interacts with the packet processing that takes place at several layers in the networking stack of the operating system. Network data can be filtered and also modified before it reaches its destination.

By providing a simpler development platform, WFP is designed to replace  previous packet filtering technologies such as Transport Driver Interface (TDI)  filters, Network Driver Interface Specification (NDIS) filters, and Winsock Layered Service Providers (LSP). Starting in Windows Server 2008 and Windows Vista, the firewall hook and the filter hook drivers  are not available; applications that were using these drivers should use WFP instead.

With the WFP API, developers can implement firewalls, intrusion detection systems, antivirus programs, network monitoring tools, and parental controls. WFP integrates with and provides support for firewall features such as authenticated communication and dynamic firewall configuration based on applications’ use of sockets API (application-based policy). WFP also provides infrastructure for  IPsec policy management, change notifications, network diagnostics, and stateful filtering.

More info can be found here http://msdn.microsoft.com/en-us/library/windows/desktop/aa366510(v=vs.85).aspx

 

32 Bit Applications that utilise NetBIOS API do not receive connection close notifications in Windows 7 64 Bit Edition, Windows Server 2008 R2 or Windows Small Business Server 2011

32 bit applications that utilise NetBIOS API do not receive connection close notifications in Windows 7 64 Bit Edition, Windows Server 2008 R2 or Windows Small Business Server 2011 and as a result they do not try to re-establish a session.  Restarting the application will re-establish the session and recover from the issue.

This issue occurs because when the Netbios.sys driver receives data the driver does not convert the Network Connection Block NCB structure from 64 bit to 32 bit when the session has been dropped.  A 32 bit application cannot understand the 64 bit NCB structure which is why the session cannot be re-established.

The Microsoft Knowledgebase article KB 2633667 provides further information on the issue and a Hotfix containing an updated version of the Netbios.sys driver that that corrects this particular issue http://support.microsoft.com/kb/2633667