{"id":189,"date":"2010-04-18T00:22:13","date_gmt":"2010-04-18T09:22:13","guid":{"rendered":"\/blog\/?p=189"},"modified":"2023-09-21T09:39:12","modified_gmt":"2023-09-21T00:39:12","slug":"ddk-sfilter-%eb%94%94%eb%b0%94%ec%9d%b4%ec%8a%a4-%eb%93%9c%eb%9d%bc%ec%9d%b4%eb%b2%84%ec%99%80-%ec%96%b4%ed%94%8c%eb%a6%ac%ec%bc%80%ec%9d%b4%ec%85%98-%ed%86%b5%ec%8b%a0","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=189","title":{"rendered":"[DDK] Sfilter \ub514\ubc14\uc774\uc2a4 \ub4dc\ub77c\uc774\ubc84\uc640 \uc5b4\ud50c\ub9ac\ucf00\uc774\uc158 \ud1b5\uc2e0"},"content":{"rendered":"\nSFilter\ub97c \uc0ac\uc6a9\ud558\uace0\uc790 \ud558\uba74,

\uc885\ub958\uac00 \ub2e4\ub974\ub2e4. 2000 \ubc84\uc804\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 SFilter\ub294 \uc815\uc801 \n\ub85c\ub529\uc774\uace0,

XP\ubc84\uc804\uc73c\ub85c \uc0c8\ub85c\ub098\uc628 SFilter\ub294 \ub3d9\uc801 \ub85c\ub529\ub3c4 \uac00\ub2a5\ud558\ub2e4.

\ub2e4\ub4e4 \uadf8\ub0e5 Filemon\uc73c\ub85c \ub3d9\uc801 \ud6c4\ud0b9\uc744 \ud558\ub294 \n\uacbd\uc6b0\uac00 \ub9ce\ub2e4.

\uadf8\uac83\ub3c4 \uc88b\uc740 \ubc29\ubc95 \uc774\uc9c0\ub9cc \ubcfc\ub968\uad00\ub828\uc791\uc5c5\uc744 \ud558\uae30 \uc704\ud574\uc11c\ub294 SFilter\ub3c4 \uc811\uadfc\ud574\ubcf4\ub294\uac8c \n\uc88b\ub2e4.

Sfilter\uc5d0\uc11c \ub4dc\ub77c\uc774\ubc84\uc640 \ud1b5\uc2e0\ud558\uae30 \uc704\ud574\uc11c\ub294 \uc2ec\ubc8c\ub9ad \ub9c1\ud06c\ub97c \uc0dd\uc131\ud574\uc57c\ud55c\ub2e4.


\n
\n
\n
 <\/div><\/div>\n
  1. \/** \n<\/font><\/span> <\/span> \n<\/li>
  2.         \uc2ec\ubcfc\ub9ad \ub9c1\ud06c\ub97c \uc0dd\uc131\ud558\ub294 \ub8e8\ud2f4 \n<\/font><\/span> <\/span> \n<\/li>
  3.     **\/<\/font><\/span>  <\/span><\/span> \n<\/li>
  4.        <\/span> \n<\/li>
  5.     RtlInitUnicodeString( &SymbolicName, AUTHMON_DOS_DEVICE_NAME ); \n  <\/span> \n<\/li>
  6.   <\/span> \n<\/li>
  7.     status = IoCreateSymbolicLink( &SymbolicName, &DeviceName ); \n  <\/span> \n<\/li>
  8.   <\/span> \n<\/li>
  9.     <\/span>if<\/font><\/strong><\/span>( !NT_SUCCESS( status ) ) \n  <\/span> \n<\/li>
  10.     {   <\/span> \n<\/li>
  11.         IoDeleteDevice( g_AuthMonControlDeviceObject ); \n  <\/span> \n<\/li>
  12.         <\/span>return<\/font><\/strong><\/span> status;   <\/span> \n<\/li>
  13.     }   <\/span> \n<\/li>
  14.        <\/span> \n<\/li>
  15.     <\/span>\/** \n<\/font><\/span>  \n<\/li>
  16.         \ub4dc\ub77c\uc774\ubc84 \uc624\ube0c\uc81d\ud2b8\ub97c \ucd08\uae30\ud654\ud558\ub294 \ub8e8\ud2f4  \n<\/font><\/span> <\/span> \n<\/li>
  17.     **\/<\/font><\/span>  <\/span><\/span><\/li><\/ol><\/div><TEXTAREA \nclass=\"cpp\" style=\"DISPLAY: none\" name=code rows=10 cols=60>\/** \uc2ec\ubcfc\ub9ad \ub9c1\ud06c\ub97c \uc0dd\uc131\ud558\ub294 \n\ub8e8\ud2f4 **\/ RtlInitUnicodeString( &SymbolicName, AUTHMON_DOS_DEVICE_NAME ); \nstatus = IoCreateSymbolicLink( &SymbolicName, &DeviceName ); if( \n!NT_SUCCESS( status ) ) { IoDeleteDevice( g_AuthMonControlDeviceObject ); return \nstatus; } \/** \ub4dc\ub77c\uc774\ubc84 \uc624\ube0c\uc81d\ud2b8\ub97c \ucd08\uae30\ud654\ud558\ub294 \ub8e8\ud2f4 **\/<\/TEXTAREA>

    \uadf8\ub9ac\uace0 \uc5b4\ud50c\ub9ac\ucf00\uc774\uc158\uc5d0\uc11c\ub294 \uc774\ub807\uac8c \n\ud558\uba74\ub41c\ub2e4.


    \n
    \n
    \n
    view plain<\/font><\/a>copy to clipboard<\/font><\/a>print<\/font><\/a>?<\/font><\/a><\/div><\/div>\n
    1. bool<\/font><\/strong><\/span> CDriverModuleDlg::OpenDevice() \n  <\/span><\/span> \n<\/li>
    2. {   <\/span> \n<\/li>
    3.     m_hFile = CreateFile(    <\/span> \n<\/li>
    4.                           <\/span>\"\\\\\\\\.\\\\AuthMon\"<\/font><\/span>,<\/span>\/\/ m_strSymbolicLink,  \n<\/font><\/span>  <\/span> \n<\/li>
    5.                           GENERIC_READ |    <\/span> \n<\/li>
    6.                           GENERIC_WRITE,    <\/span> \n<\/li>
    7.                           0,    <\/span> \n<\/li>
    8.                           NULL,    <\/span> \n<\/li>
    9.                           OPEN_EXISTING,    <\/span> \n<\/li>
    10.                           FILE_ATTRIBUTE_NORMAL,    <\/span> \n<\/li>
    11.                           NULL    <\/span> \n<\/li>
    12.                           );   <\/span> \n<\/li>
    13.   <\/span> \n<\/li>
    14.     <\/span>if<\/font><\/strong><\/span> ( INVALID_HANDLE_VALUE == m_hFile ) \n  <\/span> \n<\/li>
    15.     {   <\/span> \n<\/li>
    16.         AfxMessageBox( _T(<\/span>\"\uc9c0\uc815\ud55c Device \uc5f4\uae30 \uc2e4\ud328\"<\/font><\/span>), MB_ICONERROR ); \n  <\/span> \n<\/li>
    17.         <\/span>return<\/font><\/strong><\/span> <\/span>false<\/font><\/strong><\/span>; \n  <\/span> \n<\/li>
    18.     }   <\/span> \n<\/li>
    19.   <\/span> \n<\/li>
    20.     <\/span>return<\/font><\/strong><\/span> <\/span>true<\/font><\/strong><\/span>; \n  <\/span> \n<\/li>
    21. }  <\/span><\/li><\/ol><\/div>\n

      <TEXTAREA class=\"cpp\" style=\"DISPLAY: none\" name=code rows=10 \ncols=60>bool CDriverModuleDlg::OpenDevice() { m_hFile = CreateFile( \n\"\\\\\\\\.\\\\AuthMon\",\/\/ m_strSymbolicLink, GENERIC_READ | GENERIC_WRITE, 0, NULL, \nOPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL ); if ( INVALID_HANDLE_VALUE == \nm_hFile ) { AfxMessageBox( _T(\"\uc9c0\uc815\ud55c Device \uc5f4\uae30 \uc2e4\ud328\"), MB_ICONERROR ); return false; \n} return true; }<\/TEXTAREA>
      <\/p>\n

      \ucd9c\ucc98 : http:\/\/ssmhz.tistory.com\/143\n<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

      SFilter\ub97c \uc0ac\uc6a9\ud558\uace0\uc790 \ud558\uba74, \uc885\ub958\uac00 \ub2e4\ub974\ub2e4. 2000 \ubc84\uc804\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 SFilter\ub294 \uc815\uc801 \ub85c\ub529\uc774\uace0, XP\ubc84\uc804\uc73c\ub85c \uc0c8\ub85c\ub098\uc628 SFilter\ub294 \ub3d9\uc801 \ub85c\ub529\ub3c4 \uac00\ub2a5\ud558\ub2e4. \ub2e4\ub4e4 \uadf8\ub0e5 Filemon\uc73c\ub85c \ub3d9\uc801 \ud6c4\ud0b9\uc744 \ud558\ub294 \uacbd\uc6b0\uac00 \ub9ce\ub2e4. \uadf8\uac83\ub3c4 \uc88b\uc740 \ubc29\ubc95 \uc774\uc9c0\ub9cc \ubcfc\ub968\uad00\ub828\uc791\uc5c5\uc744 \ud558\uae30 \uc704\ud574\uc11c\ub294 SFilter\ub3c4 \uc811\uadfc\ud574\ubcf4\ub294\uac8c \uc88b\ub2e4. Sfilter\uc5d0\uc11c \ub4dc\ub77c\uc774\ubc84\uc640 \ud1b5\uc2e0\ud558\uae30 \uc704\ud574\uc11c\ub294 \uc2ec\ubc8c\ub9ad \ub9c1\ud06c\ub97c \uc0dd\uc131\ud574\uc57c\ud55c\ub2e4.   \/**           \uc2ec\ubcfc\ub9ad \ub9c1\ud06c\ub97c \uc0dd\uc131\ud558\ub294 \ub8e8\ud2f4     […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[24],"tags":[],"class_list":["post-189","post","type-post","status-publish","format-standard","hentry","category-development_winddk"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/189","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=189"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/189\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=189"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=189"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=189"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}