Hi, I am asking this again to see if someone will help me further. I have patched the sendto system call in the system call table. Now when my function is called it is passed the socket identifier. since it is an int I have no clue what to do with it. Within the Kernel you are not allowed to call any socket functions. so is there a way to get all the information of what process/Apllication, protocol, port it is trying to access. Any help would be appreciated. I have looked at the sys_socket.h and socket.h file but still don't know what to do. Thanks Also if there is a way to call a outside program from with in the Kernel, that would be great too. I want the outside program to be run in the background and no windows, or even the terminal to pop open. Please let me know if you know anything. Thanks again, Matt _______________________________________________ darwin-kernel mailing list | darwin-kernel@lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.