In what way I can implement packet filtering function in C++/C#?

Posted by Network study on Programmers See other posts from Programmers or by Network study
Published on 2014-06-03T18:49:34Z Indexed on 2014/06/03 21:39 UTC
Read the original article Hit count: 149

Filed under:

c++11

|

sockets

|

networks

Background: I am going to design a firewall-like application (with GUI) which will include several functions such as Packet sniffing and packet filtering. Both of the functions should be implemented to support different protocol levels including application, transport, network and link layer. I only know a little in C#.Net programming to perform the IP packet sniffing. It is also known that packet filtering requires the techniques in WFP or LSP and packet sniffing in application requires dll hooking.

Questions: I am not sure which programming language(either C++ or C#) would be suitable for designing such an application described above. If I want to implement the packet filtering function, any libraries will be needed?

edit01: Someone suggest that winDivert would be helpful, is it true?

© Programmers or respective owner

Related posts about c++11

Upgrade Your Existing BI Publisher 11g (11.1.1.3) to 11.1.1.5

as seen on Oracle Blogs - Search for 'Oracle Blogs'
It’s already more than a month now since BI Publisher 11.1.1.5 was released at beginning of May. Have you already tried out many of the great new features? If you are already running on the first version of BI Publisher 11g (11.1.1.3) you might wonder how to upgrade the existing BI Publisher to the… >>> More
EXALYTICS - Oracle® Essbase 11.1.2.1.000 Patch Set (PS): 11.1.2.2.000

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Who should apply this patch: This PS contains defect fixes and changes that are specific to the Oracle Exalytics In-Memory box. You should install this PS only in the following circumstances: You are installing Essbase on the Exalytics In-Memory Machine, or There is an urgent… >>> More
Upgrading Fusion Middleware 11.1.1.x to 11.1.1.4

as seen on Oracle Blogs - Search for 'Oracle Blogs'
This is a follow on from my previous post where we upgraded 11.1.1.2 to 11.1.1.3. The instructions I provide here will work for Fusion Middleware 11.1.1.2 and 11.1.1.3 wanting to upgrade to 11.1.1.4. In this example I’m just upgrading SOA Suite on OEL 64bit but the steps will be the same, some of… >>> More
Dual Boot Oracle Solaris 11/11 and Linux (Ubuntu 11.10/grub2)

as seen on Oracle Blogs - Search for 'Oracle Blogs'
After having worked with Open Solaris on my laptop first, then with an upgrade to Oracle Solaris 11 Express, I finally did a fresh install of Oracle Solaris 11/11, when it became available. I am not a big fan of upgrades as I know that I am not the perfect administrator and my system gets spoiled… >>> More
Remembering September 11 - 11 Years Later

as seen on Oracle Blogs - Search for 'Oracle Blogs'
It's September 11 again and time to reminisce about that fateful day when the world came together as one. The attacks of that day touched everyone around the world as almost 3000 people from the United States and 38 other countries were killed. This year, I am finding it difficult to say anything… >>> More

Related posts about sockets

Performance implications of Synchronous Sockets vs Asynchronous Sockets

as seen on Stack Overflow - Search for 'Stack Overflow'
We are trying to build an SMTP Server to receive mail notifications from various clients over internet. As each of the communication will be longer and it needs to log everything, doing this Asynchronous way is little challenging as well as by using Socket's Asynchronous methods we are not sure of… >>> More
Multiple INET sockets (mulple IP's too) connected to UNIX sockets

as seen on Server Fault - Search for 'Server Fault'
HOST = same host all the time, accepts multiple connection. I have a dedicated server and I will buy extra IP's. Socket 1 connects to HOST:PORT, from IP-1 Socket 2 connects to HOST:PORT, from IP-1 Socket 3 connects to HOST:PORT, from IP-1 Socket 4 connects to HOST:PORT, from IP-2 Socket 5 connects… >>> More
Multiple INET sockets (mulple IP's too) connected to UNIX sockets

as seen on Stack Overflow - Search for 'Stack Overflow'
HOST = same host all the time, accepts multiple connection. I have a dedicated server and I will buy extra IP's. Socket 1 connects to HOST:PORT, from IP-1 Socket 2 connects to HOST:PORT, from IP-1 Socket 3 connects to HOST:PORT, from IP-1 Socket 4 connects to HOST:PORT, from IP-2 Socket 5 connects… >>> More
Do WebSockets have exclusive access to their sockets?

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm curious to know if, after a WebSocket has been established (after having received the proper handshake from a server that supports them), whether or not the TCP socket used by the "WebSocket connection" is used exclusively by the WebSocket, or if the browser may still make regular HTTP requests… >>> More
What Parallel computing APIs make good use of sockets?

as seen on Stack Overflow - Search for 'Stack Overflow'
My program uses sockets, what Parallel computing APIs could I use that would help me without obligating me to go from sockets to anything else? When we are on a cluster with a special, non-socket infrastructure system this API would emulate something like sockets but using that infrastructure (so… >>> More