Reply To: Process ID

Home Forums Discussions Support Process ID Reply To: Process ID

#6009
Vadim Smirnov
Keymaster

    Process context is not available at the NDIS level where WinpkFilter works. In order to determine the packet associated process you should obtain the current connections table on some way (TDI filter, LSP and some other less popular ways) and match packet to the process using address/port information.

    Usually, firewall is a combination of NDIS level filter (packet firewall) and application level filter (application/desktop firewall).

    Hope it helps