MiniFilter and network events

Hey, guys. I am trying to filter network events within my minifilter.
The minifilter attaches itself to both \Device\LanmanRedirector and
\Device\WebDavRedirector
and I see only requests going to the LAN but not to the outside world.

Is it possible to monitor and filter the traffic (web, ftp, etc) including
potrs without touching NDIS?
Does the filter manager support that somehow?

Regars,
Dmitry.

> Is it possible to monitor and filter the traffic (web, ftp, etc) including

potrs without touching NDIS?

That’s at a different level than the file system activity, so you need a
different kind of filter to watch that traffic. Unfortunately, the network
has its own set of filtering models and is an entirely different beast.
NTDEV is a better place to ask questions about this kind of filtering.

-scott


Scott Noone
Consulting Associate
OSR Open Systems Resources, Inc.
http://www.osronline.com

“Dmitry Geskin” wrote in message news:xxxxx@ntfsd…
> Hey, guys. I am trying to filter network events within my minifilter.
> The minifilter attaches itself to both \Device\LanmanRedirector and
> \Device\WebDavRedirector
> and I see only requests going to the LAN but not to the outside world.
>
> Is it possible to monitor and filter the traffic (web, ftp, etc) including
> potrs without touching NDIS?
> Does the filter manager support that somehow?
>
> Regars,
> Dmitry.
>
>

Thanks, Scott.

“Scott Noone” wrote in message news:xxxxx@ntfsd…
>> Is it possible to monitor and filter the traffic (web, ftp, etc)
>> including potrs without touching NDIS?
>
> That’s at a different level than the file system activity, so you need a
> different kind of filter to watch that traffic. Unfortunately, the network
> has its own set of filtering models and is an entirely different beast.
> NTDEV is a better place to ask questions about this kind of filtering.
>
> -scott
>
> –
> Scott Noone
> Consulting Associate
> OSR Open Systems Resources, Inc.
> http://www.osronline.com
>
>
> “Dmitry Geskin” wrote in message news:xxxxx@ntfsd…
>> Hey, guys. I am trying to filter network events within my minifilter.
>> The minifilter attaches itself to both \Device\LanmanRedirector and
>> \Device\WebDavRedirector
>> and I see only requests going to the LAN but not to the outside world.
>>
>> Is it possible to monitor and filter the traffic (web, ftp, etc)
>> including potrs without touching NDIS?
>> Does the filter manager support that somehow?
>>
>> Regars,
>> Dmitry.
>>
>>
>