basil00 / WinDivert

WinDivert: Windows Packet Divert
https://reqrypt.org/windivert.html
Other
2.48k stars 501 forks source link

How to capture/modify/drop the package of a process? #104

Closed huge818 closed 6 years ago

huge818 commented 6 years ago

I'm interested in a process packet. not all of the package of interface.

if there is a process

client.exe

, How to capture/modify/drop the package of it?

How to determine the packet come from which process?

ghost commented 6 years ago

Please also check this: https://github.com/basil00/Divert/issues/103 Currently it's not possible in WinDivert to get the process.

basil00 commented 6 years ago

As mentioned, it is currently not possible. You can try to get the process ID via the IP helper API.