说明：传输层过滤驱动程序，用它截获网络封包，这个例子直接将封包转发到了底层-Note : the transport layer filter driver, using it intercepted network packets, this example packets transmitted directly to the bottom

防火墙个人防火墙数据包包过滤TCP/IP 传输层TDI 驱动程序网络驱动过滤驱动 -Firewall, personal firewall bag filter data TCP/IP transport layer driver network drive TDI filter driver

讨论了各种常用的网络封包截获方法，包括传输层过滤驱动程序、NDIS中间驱动程序Winsock2 SPI，然后以Xfilter个人防火墙为实例，从功能分析、模块设计、界面设计等介绍了软件开发的全过程。-Discussed a variety of commonly used network packet interception methods, including the transport layer filter driver, NDIS intermediate driver Winsoc