Status: ✅ COMPLETE
Scope: How Windows carries out networking: network drivers, the stack from application to NIC, Winsock, tcpip.sys, the DNS and DHCP clients, the firewall, network profiles, the hosts file and the routing table
Time to complete: 90–120 minutes of reading + lab
Prerequisites: Chapter 4 (Motherboard and Hardware Communication), Chapter 13 (Drivers), and the previous chapter on networking basics (MAC, IP, ARP, DNS, DHCP, TCP/UDP, ports, routing, NAT)
What you'll know after: Which Windows parts handle each step of a network conversation, how to look at them with built-in tools, and exactly what happens when you type a web address and press Enter
INTRODUCTION
The previous chapter taught the rules of networking. This chapter shows the machinery inside Windows that follows those rules. When you open a web page, your PC runs a chain of drivers, services and tables: a network driver talks to the NIC, a kernel driver builds the packets, a service remembers DNS answers, another asks for your IP address, and the firewall checks everything on the way.
This chapter uses real photos and screenshots where they help, and ASCII diagrams where they do not. It uses plain words, and every technical term is explained the first time it appears.
This chapter explains:
- How a network adapter is controlled by an NDIS miniport driver
- The stack: Winsock, AFD, tcpip.sys, NDIS, miniport, NIC, with WFP hooks
- How programs use sockets (Winsock)
- What
tcpip.sysdoes, and the neighbor cache and routing table it uses - How the DNS Client service and its cache work
- How the DHCP Client leases an address, and what 169.254.x.x means
- How Windows Firewall is built (MpsSvc, BFE, WFP) and how its rules are applied
- How network profiles (Public, Private, Domain) are chosen
- The hosts file and
route print - The complete chain for typing
google.comand pressing Enter
CHAPTER OUTLINE
- Section 1: Network Adapters and Drivers
- Section 2: Windows Networking Stack
- Section 3: Winsock
- Section 4: TCP/IP Stack Implementation
- Section 5: DNS Client Service
- Section 6: DHCP Client Service
- Section 7: Windows Firewall Implementation
- Section 8: Network Profiles
- Section 9: Hosts File and Routing Table
- Section 10: Complete Chain — Typing google.com and Pressing Enter
- Practical Lab: Windows Networking Tools
- Knowledge Check
Chapter Status: Complete
Estimated reading time: 100 minutes
Practical time: 30 minutes
Knowledge check time: 30 minutes