-
-
wfp 网络连接 tcp数据包监控
-
发表于: 2016-11-4 08:00
-
做个备份，不然又要重新写代码。
{
status = TLInspectRegisterFlowEstablishedCallouts(
&FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4,
&MSN_MONITOR_FLOW_ESTABLISHED_CALLOUT_V4,
deviceObject,
&flowEstablishedId
);
if (!NT_SUCCESS(status))
{
goto Exit;
}
status = TLInspectRegisterStreamCallouts(
&FWPM_LAYER_STREAM_V4,
&MSN_MONITOR_STREAM_CALLOUT_V4,
deviceObject,
&streamId
);
if (!NT_SUCCESS(status))
{
goto Exit;
}
}
右键inspect.inf安装，然后在cmd中sc start inspect
源码：
sys.rar
{
status = TLInspectRegisterFlowEstablishedCallouts(
&FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4,
&MSN_MONITOR_FLOW_ESTABLISHED_CALLOUT_V4,
deviceObject,
&flowEstablishedId
);
if (!NT_SUCCESS(status))
{
goto Exit;
}
status = TLInspectRegisterStreamCallouts(
&FWPM_LAYER_STREAM_V4,
&MSN_MONITOR_STREAM_CALLOUT_V4,
deviceObject,
&streamId
);
if (!NT_SUCCESS(status))
{
goto Exit;
}
}
右键inspect.inf安装，然后在cmd中sc start inspect
源码：
sys.rar
[注意]传递专业知识、拓宽行业人脉——看雪讲师团队等你加入！
|
|
|---|---|
|
|
mark
|
|
|
|
|
|
|
|
|
|
|
|
|
