Network data packets are captured by NDIS Intermediate driver;A rule-based filtering algorithm is presented in this paper,and a layered filtering framework is included in the algorithm.

• 本文介绍了NDIS驱动程序结构,给出NDIS中间驱动程序实现网络数据包的拦截方法;并实现了一个基于规则的过滤算法,在过滤算法中引入了一个分层框架。