From the Windows NT network documentation: When a network packet arrives from a remote network node, the NIC captures the packet and signals the local NIC driver. The NIC driver then makes a call to the NDIS library, which calls, in turn, transport driver lower-edge functions to notify bound transport drivers of the incoming packet and subsequently transfer the packet data. Transport driver function names are prefaced with "Protocol."