site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:date:message-id:subject:from:to :content-type; bh=alzmh9TQdK+X8ZY740yVVDhicuZ885AaRFyqk5d2MnY=; b=KvrQ19Fi5MV45pp5RWNCxtpRLU/7oTwjVasd7OFgICn7wMbdX9EcBDuAgQnJM0KkfM 3I6xobJBPswqzuMhlpCAuydqZn8SDkb8/RVnKsX+MdUBmGkxcbF7C0AZVS5y+B83RqH5 GLqCIxwhb7JWaMGkIkGVk7R4hRUfct2IGAS6U= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=xQgfWDGuTX84PUZDQPu8V7U4ePciwYY2Dxp/xWQg2fPKOc502iQPsoOmTIMubHk3xl WaQ3lPPlX8a7Ntx0xBg50rTj3+6W3pkNdWpKougXLAw/PoXhjdorSPEuxqsm10QB8mPv naV/l2kLMvRyEoR7YixgXWaDyFFO7fXaGMHHc= Hello I am writing an NKE filter, and I'm wondering if i could get a process name (ideally - a full path to the process) that my filter has been attached to. When my "attach" function has been called, i have a pointer to the socket_t structure. Is there any way to trace the way to the process (a process' PID identifier) that has opened this socket, and find out its name? So, if i am lucky and there is a way to determine the process identifier, i also dare to ask if i could get process name by its identifier from a kernel space (i know i can get it using sysctl, from the user space, and therefore as the last resort i could send a request to the usermode process and wait for the response, but i am pretty sure it should be possible to do from the kernelspace). Unfortunately my Darwin kernel programming knowledge finish with NKE programming only. I am writing a Parental Control system, that passes only a specific "allowed" applications' packets (or, rather, should not pass network packets of/for "banned" applications). Thanks for any response, if i get any James Ex. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com