Winsock Communication Monitoring—Hooking the Base Service Provider
Cao Xue-wu · Microcomputer Information · 2011
Based on the premise of the wide range of current needs of network monitoring,this paper presents a new solution to realize the monitoring of the Winsock Communication.After analyzing the Winsock SPI technology,this paper presents that we can hook the Base Service provider of the agreement on the network,and implements the program by Web filtering case.In order to analyze and evaluate the performance of the program,this paper raises a performance analysis model on Web filtering case.After repeated testing and the statistical analysis of experimental results based on the performance analysis model,we found that the scheme has good performance,which proves that ours method can successfully implement the monitoring of the Winsock Communication.