!ndiskd.ifstacktable

项目
04/15/2024

!ndiskd.ifstacktable 扩展显示网络接口堆栈表（ifStackTable）。

有关接口堆栈表的详细信息，请参阅维护网络接口堆栈。

!ndiskd.ifstacktable

参数

此扩展没有参数。

DLL

Ndiskd.dll

示例

运行 !ndiskd.ifstacktable 命令以查看 ifStackTable。

3: kd> !ndiskd.ifstacktable


INTERFACE STACK TABLE

    Lower interface    Lower IfIndex       Higher IfIndex     Higher interface  
    ffffdf80139b3a20   6                   15                 ffffdf801494fa20
    ffffdf801494fa20   15                  16                 ffffdf801494c010
    ffffdf801494c010   16                  17                 ffffdf801494ba20

NDIS 维护 NDIS 微型端口适配器、NDIS 5.x 筛选器中间驱动程序和 NDIS 筛选器模块的堆栈表，而 NDIS MUX 中间驱动程序驱动程序需要指定虚拟微型端口接口与协议较低接口之间的内部接口关系。因此，ifStackTable 对于在安装了更复杂的 MUX 驱动程序的系统中查看接口堆栈关系非常有用。

由于此示例系统上没有安装 NDIS MUX 中间驱动程序，因此 ifStackTable 仅显示 NDIS 提供的堆栈关系。在以下示例中，单击第三行（句柄 ffffdf801494c010，Lower IfIndex 16）的较低接口的句柄会显示 QoS 数据包计划程序。

3: kd> !ndiskd.interface ffffdf801494c010


INTERFACE

    [Zero-length string]

    Ndis handle        ffffdf801494c010 
    IfProvider         ffffdf80131ca8d0 - The NDIS interface provider
    NDIS filter        ffffdf801494dc70 - Microsoft Kernel Debug Network Adapter-QoS Packet Scheduler-0000

    ifType             IF_TYPE_ETHERNET_CSMACD
    Media type         802.3
    Physical medium    NdisPhysicalMediumOther
    Access type        BROADCAST
    Direction type     SEND_AND_RECEIVE
    Connection type    DEDICATED

    ifConnectorPresent No

    Network            ffffdf80139b8900 - [Unnamed network]
    Compartment        ffffdf80139b9940 - Compartment #1


IDENTIFIERS

    ifAlias            [Zero-length string]
    ifDescr            Microsoft Kernel Debug Network Adapter-QoS Packet Scheduler-0000
    ifName (NET_LUID)  06:01
    ifPhysAddress      18-03-73-c1-e8-72

    ifIndex            0n16
    ifGuid             fc2a0ae1-b103-11e6-b724-806e6f6e6963


STATE

    Connected          Connected
    ifOperStatus       DORMANT
    ifOperStatusFlags  DORMANT_PAUSED

    Link speed         1000000000 (1 Gbps)
    ifMtu              0n1500
    Duplex             FullDuplex

    Refer to RFC 2863 for definitions of many of these terms

继续使用相同的示例，单击第三行（句柄 ffffdf801494ba20，Higher IfIndex 17）的较高接口的句柄会显示 WWFP 802.3 MAC Layer LightWeight Filter 的接口。

3: kd> !ndiskd.interface ffffdf801494ba20


INTERFACE

    [Zero-length string]

    Ndis handle        ffffdf801494ba20    [type it]
    IfProvider         ffffdf80131ca8d0 - The NDIS interface provider
    NDIS filter        ffffdf801494c670 - Microsoft Kernel Debug Network Adapter-WFP 802.3 MAC Layer LightWeight Filter-0000

    ifType             IF_TYPE_ETHERNET_CSMACD
    Media type         802.3
    Physical medium    NdisPhysicalMediumOther
    Access type        BROADCAST
    Direction type     SEND_AND_RECEIVE
    Connection type    DEDICATED

    ifConnectorPresent No

    Network            ffffdf80139b8900 - [Unnamed network]
    Compartment        ffffdf80139b9940 - Compartment #1


IDENTIFIERS

    ifAlias            [Zero-length string]
    ifDescr            Microsoft Kernel Debug Network Adapter-WFP 802.3 MAC Layer LightWeight Filter-0000
    ifName (NET_LUID)  06:02
    ifPhysAddress      18-03-73-c1-e8-72

    ifIndex            0n17
    ifGuid             fc2a0ae0-b103-11e6-b724-806e6f6e6963


STATE

    Connected          Connected
    ifOperStatus       DORMANT
    ifOperStatusFlags  DORMANT_PAUSED

    Link speed         1000000000 (1 Gbps)
    ifMtu              0n1500
    Duplex             FullDuplex

    Refer to RFC 2863 for definitions of many of these terms

这表明，WFP 802.3 MAC Layer LightWeight Filter 位于网络接口堆栈中的QoS 数据包计划程序之上。可以通过运行 !ndiskd.netreport 扩展来确认这一点，该扩展直观地显示网络堆栈。