How the Http.sys Send Data RRS feed

  • Question

  • Hi All:

    I want to intercept the data from http.sys.But I can't find IRP which minorFucntion is TDI_SEND.

    I have tried intercept the IRP IOCTL_TDI_QUERY_DIRECT_SEND_HANDLER,but NOTHING.

    How Can I intercept the data send from http.sys(IIS6).Thank you.

    Tuesday, March 13, 2012 3:18 AM