site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=4k00T4ylBWMVcDTZuwAqs3ELSkqP4TKv3Py5NzBl+Z8=; b=uU7pMy1mbfRLuKxY+D8stmL15Q0Ba1uDgWbN2mzR8lArrMr1oM1JHVQKEfe8f+sSLo /gd6SYNPl2YoEpHS7lraV7iocMYmqUzofyTOIzJ2qmPlfop7NVbbHAHs/CK6Z+VAWl8h RDr4o1TugvsaEZSt/mMZB2XiXFzy1lpdprvok= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=NGZ1v2jxN7HCMwvzaE6YeatDwl4VCpiP7hGECJFEiph+tMd+P77LCOt6Sr5CK6wYy2 x43iX+FJ8xmzHNIZdIyaGQXwFOCebcR6QETVN3uLLpAZ3T914FXKrX9Z8ZJTW4nMr6/7 vDs4SxzOksErlyyp0OjDtG5gnlxxn3l3WdpVs=

Is there any way to get the TCP parameters of a particular socket_t without using filters?

What is the problem with using filter in here?

Is there any way of intercepting packets during handshake using Socket filters?

If you read the NKE doc, you would have noticed that "socket filters" are high level entities, and they have callback functions like "on connected" "on data received" "on attached". Recommend you to read it again rather than just read code samples. For low level things (like connection establishment details) you have IP filters.

But that could mean a ton of works and potentially buggy kernel extension.

Depends on you. Theres not so much mess there actually, apple provided a neat wrapper around this stuff (unlike NDIS in windows). _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com