Re: Packet Analyzing (getting source application)

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Arkady Frenkel (arkadyf_at_hotmailxdotx.com)
Date: 03/01/05 

Date: Tue, 1 Mar 2005 16:54:30 +0200

No , that native API and not DDK
Arkady

"Hal" <Hal@discussions.microsoft.com> wrote in message
news:B35D5767-CDA1-4804-B9F5-367976C7C40F@microsoft.com...
> Hmm, messy code :) Seems I need to get MS DDK for it? Where does one get
> that?
>
> Any other ideas?
>
> "Alexander Nickolov" wrote:
>
>> You can check out PortUser.cpp here:
>>
>> http://groups-beta.google.com/group/microsoft.public.win32.programmer.networks/msg/2fd169a4dce10c4?hl=en&lr=&ie=UTF-8&rnum=1
>>
>> Works on Win2K _only_.
>>
>> --
>> =====================================
>> Alexander Nickolov
>> Microsoft MVP [VC], MCSD
>> email: agnickolov@mvps.org
>> MVP VC FAQ: http://www.mvps.org/vcfaq
>> =====================================
>>
>> "Hal" <Hal@discussions.microsoft.com> wrote in message
>> news:F8D6CC57-1D11-4B84-A88C-8CA1516FB18A@microsoft.com...
>> > OK, been reading and testing the (undocumented) API function
>> > AllocateAndGet(Tcp/Udp)ExTableFromStack() and it's become apparent that
>> > it's
>> > only applicable on Windows XP (and later) systems.
>> >
>> > Any ideas on how to achieve this on Windows 2000 systems?
>> >
>> > "Hal" wrote:
>> >
>> >> Thanks a lot, guys.
>> >>
>> >> I'll have a look at the code and will return if I encounter further
>> >> problems.
>> >>
>> >> Cheers,
>> >>
>> >> "Arkady Frenkel" wrote:
>> >>
>> >> > To receive source better another page of sysinternals
>> >> > http://www.sysinternals.com/ntw2k/source/tcpview.shtml
>> >> > and take a look at netstatp source where you can see how to use
>> >> > undocumented
>> >> > AllocateAndGet(Tcp/Udp)ExTableFromStack() for that
>> >> > Arkady
>> >> >
>> >> > "RNEELY" <RNEELY@discussions.microsoft.com> wrote in message
>> >> > news:19780B48-E49D-4494-AA6B-32938629675B@microsoft.com...
>> >> > > Try TDIMon
>> >> > > http://www.sysinternals.com/ntw2k/freeware/tdimon.shtml
>> >> > > Regards,
>> >> > > -Ron
>> >> > >
>> >> > > "Hal" wrote:
>> >> > >
>> >> > >> I'm currently making an application that analyzes network packets
>> >> > >> on
>> >> > >> a
>> >> > >> Windows system. I have no problems monitoring the packets but I'm
>> >> > >> having
>> >> > >> a
>> >> > >> hard time finding the source application of the packet (on the
>> >> > >> local
>> >> > >> system).
>> >> > >>
>> >> > >> Applications such as NetLimiter are able to tell where a specific
>> >> > >> packet
>> >> > >> originated from.
>> >> > >> Does anyone know how to achieve this? How can one find the
>> >> > >> process
>> >> > >> that
>> >> > >> sent
>> >> > >> the packet?
>> >> > >>
>> >> > >> Huge thanks in advance,
>> >> > >>
>> >> >
>> >> >
>> >> >
>>
>>
>>

Relevant Pages