-
-
wfp 网络连接 tcp数据包监控
-
发表于: 2016-11-4 08:00
-
做个备份，不然又要重新写代码。
{
status = TLInspectRegisterFlowEstablishedCallouts(
&FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4,
&MSN_MONITOR_FLOW_ESTABLISHED_CALLOUT_V4,
deviceObject,
&flowEstablishedId
);
if (!NT_SUCCESS(status))
{
goto Exit;
}
status = TLInspectRegisterStreamCallouts(
&FWPM_LAYER_STREAM_V4,
&MSN_MONITOR_STREAM_CALLOUT_V4,
deviceObject,
&streamId
);
if (!NT_SUCCESS(status))
{
goto Exit;
}
}
右键inspect.inf安装，然后在cmd中sc start inspect
源码：
sys.rar
{
status = TLInspectRegisterFlowEstablishedCallouts(
&FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4,
&MSN_MONITOR_FLOW_ESTABLISHED_CALLOUT_V4,
deviceObject,
&flowEstablishedId
);
if (!NT_SUCCESS(status))
{
goto Exit;
}
status = TLInspectRegisterStreamCallouts(
&FWPM_LAYER_STREAM_V4,
&MSN_MONITOR_STREAM_CALLOUT_V4,
deviceObject,
&streamId
);
if (!NT_SUCCESS(status))
{
goto Exit;
}
}
右键inspect.inf安装，然后在cmd中sc start inspect
源码：
sys.rar
[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)
|
|
|---|---|
|
|
mark
|
|
|
|
|
|
|
|
|
|
|
|
|
