Article View: borland.public.cppbuilder.nativeapi
Article #7989Re: Hooking Winsock Functions
From: KR
Date: Sat, 04 Dec 2004 14:44
Date: Sat, 04 Dec 2004 14:44
24 lines
1823 bytes
1823 bytes
No driver needed. Do a google search on "api hooking" and "dll injection". Can be complicated, but not as much as writing a driver (plus there are tools to simplify this). Most winsock-intercepting programs (firewalls, etc) use this method I think, and don't resort to installing drivers. On Mon, 15 Nov 2004 08:52:59 -0800, CC wrote: > Greetings All - > I'm embarking on a small socket monitoring program. I'd like to have a > program that can detect connection attempts to any port on a system - > similar to firewall programs. > > I understand that it is possible to 'hook' these functions, so that my > program can receive messages from the winsock mechanism when connects, and > other operations are attempted. > > I was wondering if someone could point me in the right direction - possible > some API topics I would need to look at, examples, etc? > > > Many thanks for the advice and help, > CurtC
Technical Details
Message-ID:
<pan.2004.12.04.14.44.41.939127@nospamme.net>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!proxad.net!gatel-ffm!gatel-ffm!194.25.134.126.MISMATCH!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mailReferences:
<4198c26d@newsgroups.borland.com>Show Full Headers
Complete Article Headers
X-Google-Thread: 10cc67,65f5aa4e8e0f93de X-Google-Attributes: gid10cc67,public X-Google-Language: ENGLISH,ASCII-7-bit From: KR <kr@nospamme.net> Subject: Re: Hooking Winsock Functions Date: Sat, 04 Dec 2004 09:44:43 -0500 User-Agent: Pan/0.14.2 (This is not a psychotic episode. It's a cleansing moment of clarity.) Message-ID: <pan.2004.12.04.14.44.41.939127@nospamme.net> Newsgroups: borland.public.cppbuilder.nativeapi References: <4198c26d@newsgroups.borland.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit NNTP-Posting-Host: 24.148.149.154 X-Trace: newsgroups.borland.com 1102171207 24.148.149.154 (4 Dec 2004 06:40:07 -0800) Lines: 25 Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!proxad.net!gatel-ffm!gatel-ffm!194.25.134.126.MISMATCH!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail