NT Kernel Resources News

2010-Feb-02

Local Network Monitor API 3.2.10 released:

Bug fixes in sample code
Some bug fixes in documentation
"Monitor" sample update

2009-Nov-30

Local Network Monitor and Local Network Monitor API 3.1.1 released:

Fixed Windows Services for Unix compatibility issue
Fixed data synchronization issue on SMP machine

2009-Nov-06

Local Network Monitor and Local Network Monitor API 3.1.0 released:

Windows 7 support

Filtering rule ID is replaced with Filtering rule priority. Each rule has its unique identifier or in other words usage priority (from 0 to 65535). Identifier determines the order of application of rules to a network connection. The smaller is the priority value of a rule, the higher is its priority and the faster it will be applied when analyzing network requests. The analysis is stopped when there is a security rule strictly determining whether the network connection should be processed or passed thru.

TCP connection and UDP listeners table quering.

Processes' TCPIP statistics quering.

User notifications.The possibility to handle and modify network requests in user-space application.

New samples:

netstat - shows TCP active connections and listen sockets and UDP listeners.
redir - redirects the outgoing TCP connection to another distination IP address.
wwwblock - blocks all the outgoing HTTP traffic using the pattern.
procstat - shows the running processes' TCP and UDP send/receive bytes statistics.

Attn. starting from v3.0 Local Network Monitor operates with ip address and port number in network byte order.

Attn. starting from v3.0 Local Network Monitor proc...more

2009-Aug-28

WinpkFilter 3.0.7 released. This service release includes the bugfix for WinpkFilter NDIS IM driver on power state changes.

2009-Jun-20

Local Network Monitor 3.0 released. New features:

Windows 7 support
Ability to exclude network addresses/ports range from filtering
Filter priorities and descriptions.
TCP view. Displays all active TCP and UDP endpoints

2009-Jun-18

WinpkFilter 3.0.6 released. This service release includes the bugfix for WinpkFilter NDIS IM driver (BSOD on restoring from Hibernate state on Windows Vista).

2009-May-08

WinpkFilter 3.0.5 released:

1) fixed compatibility issue with Kaspersky software
2) added API for getting active WAN connections information
3) added API for sending/receiving bulk of packets

2008-Jan-27

WinpkFilter 3.0.4 released. This service release includes:

1) Compatibility fixes in WinpkFilter API DLL and drivers
2) x64 driver support for 32 bit code running in WOW64. This feature should be useful for developers whose development tools does not include x64 native compiler. An example, Delphi 32-bit application can work with WinpkFilter driver on Windows x64.
3) Kernel level filters. You can load a filter table into WinpkFilter driver which defines rules for packet pass, block or redirect_and_ process by your application. This may seriously improve perfomance.
4) C# interface and samples

2007-Apr-30

WinpkFilter 3.0.2 released. This service release includes:

1. Few changes in API DLL required for Windows Vista support
2. Installation scripts are updated to properly install drivers on Windows Vista

2007-Oct-09

Local Network Monitor and Local Network Monitor API 2.2.3 officially released. New features:
Monitor:
- Windows Vista x86/x64 support. Windows Vista x64 support is experimental and limited due Windows Driver Signature Enforcement. Local Network Monitor driver is signed with test certificate that is not trusted by Windows. To run Local Network Monitor on Windows Vista x64 you should switch off Driver Signature Enforcement in Local Network Monitor installer or during system boot (you should press F8 during system boot and choose Disable Driver Signature Enforcement option).

API:
- Windows Vista x86/x64 support. For Windows Vista and later versions of the Windows family of operating systems, kernel-mode software must have a digital signature to load on x64-based computer systems. Local Network Monitor driver is not signed and in order to test them on Vista x64 you should press F8 during system boot and choose Disable Driver Signature Enforcement option. For the commercial software you'd have to obtain Code Signing certificate from Verysign.

See all news ...