none
How to get the current process in OUTBOUND/INBOUND_TRANSPORT_V4 layer? RRS feed

  • Question

  •  i want to get the current process in OUTBOUND/INBOUND_TRANSPORT_V4 layer   to know who is manipulating package!

    i use the ProcessNameOffset in the EPROCESS to get the process name!

    But some result looks like not correct! 

    then how to get?

    thank you!

    Friday, July 29, 2011 7:09 AM