[Winpcap-users] Can I examine and stop outgoing packets?

Gianluca Varenni gianluca.varenni at cacetech.com
Thu Nov 2 23:07:33 GMT 2006

----- Original Message ----- 
From: "jj jjjjjs" <someidunknown1234 at yahoo.com>
To: <winpcap-users at winpcap.org>
Sent: Thursday, November 02, 2006 1:10 PM
Subject: [Winpcap-users] Can I examine and stop outgoing packets?

>I just started using winpcap with the sample code and
> all I see is reading the packets. Is there a way to
> grab the packets before they leave the adapter and
> stop them from being sent out (after reading them and
> determining I don't want them to leave the computer)?

No, WinPcap uses a protocol driver, so it's basically a passive component in 
the networking stack. Please refer to


> If it's not possible with winpcap, what would I need
> to program something like that?

You need to develop an NDIS intermediate driver or something similar to 
filter the packets (I know that Vista will have some enhanced support for 
this). I don't know if there are any libraries on the market that allow you 
to easily develop such components.

Have a nice day

> Thanks!
> ____________________________________________________________________________________
> Access over 1 million songs - Yahoo! Music Unlimited
> (http://music.yahoo.com/unlimited)
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users 

More information about the Winpcap-users mailing list