site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com Thanks for the quick reply. I know that tcplognke is a socket filter and even though I need an IP filter it would still be helpful to see some kind of sample code, Tiger or pre-Tiger, that uses KEXT. You should check out the enetlognke. <http://developer.apple.com/samplecode/enetlognke/enetlognke.html> S+E -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Technical Support * Networking, Communications, Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... At 18:39 -0700 15/6/05, Allan Hoeltje wrote: This new, Tiger-based sample is not directly relevant (it intercepts at the Ethernet layer rather than the IP layer), but it does show general NKE concepts, including packaging, memory allocation, locking, and so on. It's also much easier to understand than the tcplognke (-: ps One of the reasons that the tcplognke isn't published yet is because socket-level filters are tricky to get exactly right. The packet oriented filters (IP and Ethernet) are much easier. This email sent to site_archiver@lists.apple.com