数据包监控过滤程序含驱动源码，采用IPHook驱动器程序，在内核层用钩子回调函数（IpHookFilter）勾住系统自带的IP过滤驱动器（System32\Drivers\IpFltDrv.sys），从而返回过滤驱动器传输的所有IP包数据。-Packet monitoring filter program containing driver source to using IPHook drive program the the kernel layer with a hook callback function (IpHookFilter) hooked system comes with the IP filter driver is (System32 \ the Drivers \ IpFltDrv.sys), thereby return filtration drive transmission. all of the IP packet data.