First all, sorry for my limited English….
I need edit/drop some packets that comming out from my station.
These packets have the name of the application that I’m using. For exemple, I want to edit the packet that is going to 80 port and have the string “explorer.exe” in your content.
How can I intercept these packets?
After intercept I need edit it….
Can anyone helpe me?
You can use WinpkFilter built-in filters to intercept only packets destined to port 80. For the intercepted packet you can get a pointer to packet data and search for the “explorer” string. If you modify the packet you have to recalculate packets TCP and IP checksums. Also, if you modify packet length you also have to affect TCP header.