Why does the inspect example monitor the transport layer? RRS feed

  • Question

  • Why does the inspect example in the WDK have a callout filter for monitoring the transport layer? I was under the impression that it only attempts to block or permit new connection attempts with certain remote hosts - for this purpose, wouldn't the ALE connect and ALE recv/accept layers sufficient? Does this have to do with IPsec?
    • Edited by yaaang Tuesday, October 6, 2009 5:43 PM Formatting
    Tuesday, October 6, 2009 5:42 PM


  • There was no particular reason for choosing the Transport layers.  The sample is just meant to demonstrate the different concepts, which essentially apply to other layers as well.

    Hope this helps
    Dusty Harper [MSFT]
    Microsoft Corporation
    This posting is provided "AS IS", with NO warranties and confers NO rights
    • Marked as answer by yaaang Tuesday, October 6, 2009 11:48 PM
    Tuesday, October 6, 2009 9:41 PM