i tried to map a given TCP Local Port on a Win2K machine to a process ID by IOCTL_TCP_QUERY_INFORMATION_EX
This works, but i only get established connections. I need the PID if only the sync packet was sended. Any ideas to solve this problem?
>> TDI filter, LSP, AFD filter are the most common options.
Thanks, do you have any links (sourcecode) for me?
What’s about your WinpkFilter – Framework?
I just saw your Local Network Monitor API, that seems to be the right stuff?