How to monitor and prevent apps communicating on network

Posted on 2004-11-09
Last Modified: 2010-04-01
I've searched all over the place but cant seem to find information on how to detect when an application is attempting to communicate on a network. There are article all over the place on packet filtering, but none on detecting when a remote computer is trying to establish a connection or when a local application is trying to establish a connection.

If someone could point me to an article, book, or just the functions or an api it would be a big help.

Question by:cdiamond66
    LVL 86

    Accepted Solution

    If you are on Windows, you might find ("Simple Packet - Filter Firewall") useful.

    Author Comment

    That is actually one of the articles that I found earlier. I looked at all the firewall articles at codeproject. But yes I am looking for a solution with windows 2000 or above.
    LVL 1

    Assisted Solution

    Use Winpcap.
    LVL 5

    Assisted Solution

    what you are looking for is another feature of modern personal firewalls: application network access control.
    the way this is done by software firewalls is by API hooking. this way, you can replace any windows API by your own function, and intercept any application trying to access the internet/network.

    I haven't done all the research as to which API/DLL functions you should replace, but this should get you in the right direction:

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Join & Write a Comment

    Templates For Beginners Or How To Encourage The Compiler To Work For You Introduction This tutorial is targeted at the reader who is, perhaps, familiar with the basics of C++ but would prefer a little slower introduction to the more ad…
    What is C++ STL?: STL stands for Standard Template Library and is a part of standard C++ libraries. It contains many useful data structures (containers) and algorithms, which can spare you a lot of the time. Today we will look at the STL Vector. …
    The goal of the tutorial is to teach the user how to use functions in C++. The video will cover how to define functions, how to call functions and how to create functions prototypes. Microsoft Visual C++ 2010 Express will be used as a text editor an…
    The viewer will learn how to pass data into a function in C++. This is one step further in using functions. Instead of only printing text onto the console, the function will be able to perform calculations with argumentents given by the user.

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now