🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: borland.public.cppbuilder.nativeapi
Article #7989

Re: Hooking Winsock Functions

#7989
From: KR
Date: Sat, 04 Dec 2004 14:44
24 lines
1823 bytes
No driver needed.  Do a google search on "api hooking" and 
"dll injection".  Can be complicated, but not as much as
writing a driver (plus there are tools to simplify this).

Most winsock-intercepting programs (firewalls, etc) use this
method I think, and don't resort to installing drivers.

On Mon, 15 Nov 2004 08:52:59 -0800, CC wrote:

> Greetings All -
> I'm embarking on a small socket monitoring program. I'd like to have a
> program that can detect connection attempts to any port on a system -
> similar to firewall programs.
> 
> I understand that it is possible to 'hook' these functions, so that my
> program can receive messages from the winsock mechanism when connects, and
> other operations are attempted.
> 
> I was wondering if someone could point me in the right direction - possible
> some API topics I would need to look at, examples, etc?
> 
> 
> Many thanks for the advice and help,
> CurtC
Technical Details
Message-ID: <pan.2004.12.04.14.44.41.939127@nospamme.net>
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!proxad.net!gatel-ffm!gatel-ffm!194.25.134.126.MISMATCH!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail
References: <4198c26d@newsgroups.borland.com>

Show Full Headers
Complete Article Headers
X-Google-Thread: 10cc67,65f5aa4e8e0f93de
X-Google-Attributes: gid10cc67,public
X-Google-Language: ENGLISH,ASCII-7-bit
From: KR <kr@nospamme.net>
Subject: Re: Hooking Winsock Functions
Date: Sat, 04 Dec 2004 09:44:43 -0500
User-Agent: Pan/0.14.2 (This is not a psychotic episode. It's a cleansing moment of clarity.)
Message-ID: <pan.2004.12.04.14.44.41.939127@nospamme.net>
Newsgroups: borland.public.cppbuilder.nativeapi
References: <4198c26d@newsgroups.borland.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
NNTP-Posting-Host: 24.148.149.154
X-Trace: newsgroups.borland.com 1102171207 24.148.149.154 (4 Dec 2004 06:40:07 -0800)
Lines: 25
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!proxad.net!gatel-ffm!gatel-ffm!194.25.134.126.MISMATCH!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail