Created by elements5
Powered by TweetFeed
DevFilter is an application that allows you to monitor all I/O request packets (IRP's) on your system, fast I/O requests and capture request input and DevFilter is an application that allows you to monitor all I/O request packets (IRP's) on your system, fast I/O requests and capture request input and output data. It shows you all kernel-mode drivers installed on your Windows NT/2000/XP system and device objects created by these drivers. It also allows you to hook any of these devices (not more then 10 simultaneously, by default) and monitor all requests to selected devices delivered to their dispatch table. Please, note that it hooks selected device, but not that one which can be on top of this device. This approach allows you to see the IRP path down the device stack, an example to check if it was blocked by upper level filter. All requests input and output data are converted into request-associated structures or represent as hexadecimal data.
WinpkFilter is a high performance packet filtering framework for Windows. WinpkFilter is a high performance packet filtering framework for Windows 9x/ME/NT/2000/XP that allows developers to transparently filter (view and modify) raw network packets with minimal impact on network activity without having to write low level TDI or NDIS driver code. WinpkFilter is more than just a firewall development kit for Windows. Wide range of solutions can be implemented using WinpkFilter: custom firewalls, internet connection sharing (NAT), IP shaper, VPN and many other low-level network solutions completely in user-mode using your favorite development environment: Visual C++, Delphi, C++ Builder etc. Using WinpkFilter requires no experience in kernel mode programming on your behalf since WinpkFilter provides you with powerful user level API. However, if you need to implement your solution (to achieve better performance) in kernel mode you can use well-documented raw IOCTL interface as well.
