[Winpcap-users] Can I examine and stop outgoing packets?

[Gianluca Varenni]

----- Original Message ----- 
From: "jj jjjjjs" <someidunknown1234 at yahoo.com>
To: <winpcap-users at winpcap.org>
Sent: Thursday, November 02, 2006 1:10 PM
Subject: [Winpcap-users] Can I examine and stop outgoing packets?


>I just started using winpcap with the sample code and
> all I see is reading the packets. Is there a way to
> grab the packets before they leave the adapter and
> stop them from being sent out (after reading them and
> determining I don't want them to leave the computer)?

No, WinPcap uses a protocol driver, so it's basically a passive component in 
the networking stack. Please refer to

http://www.winpcap.org/misc/faq.htm#Q-17

>
> If it's not possible with winpcap, what would I need
> to program something like that?

You need to develop an NDIS intermediate driver or something similar to 
filter the packets (I know that Vista will have some enhanced support for 
this). I don't know if there are any libraries on the market that allow you 
to easily develop such components.

Have a nice day
GV

>
> Thanks!
>
>
>
> ____________________________________________________________________________________
> Access over 1 million songs - Yahoo! Music Unlimited
> (http://music.yahoo.com/unlimited)
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users