Stop Process answering TCP Packets

Hi all,

I wrote a program that receives all incoming data on the network. I want to send back answers to packets I filtered before. So far so good but when I try to send back my packets an answer from my Windows has already been done. The packets arrive on Port 135. What process do I have to stop so that my OS does not send any reply. I am using Windows (XP,2000,98)

Thanks in advance
KingKong
[417 byte] By [kingkong321] at [2007-11-18 20:30:53]
# 1 Re: Stop Process answering TCP Packets
The M$ "Remote Procedure Call" service uses this port. DCOM relies on that service. U might find this service in Service Manager.
dimm_coder at 2007-11-9 13:46:44 >
# 2 Re: Stop Process answering TCP Packets
Hi dimm_coder,

thanks for your hint. I deactivated this service. Nevertheless TCP packets "request for new connection" are still being answered.

Network Distinct Monitor says:

The acknowledgement flag is set indicating that the acknowledgement number is valid.
The reset flag is set indicating that the source wants to either abort the connection or indicates an invalid connection.

I do not want that any reply is sent.

However maybe I can forward the packet to any other port before it arrives port 135 in my machine. Any idea?

Best Regards,
kingkong
kingkong321 at 2007-11-9 13:47:44 >
# 3 Re: Stop Process answering TCP Packets
Let me guess that U are using raw sockets in your program. I don't know what goals U want to achive, but for getting the total control over tcp connection servicing, U have to write your own kernel-mode driver and place it between the pure IP level implementation and the TCP level implementation of the kernel. I guess that the all windoze network-level implementation has a stacked architecture, thus it's possible to place your own intermediate level. I don't know much about Windoze network implementation, thus cannot point U in the concrete material. If U are still interested, I'd suggest to take a look what Windoze DDK says about programming of network drivers.
dimm_coder at 2007-11-9 13:48:43 >
# 4 Re: Stop Process answering TCP Packets
Hi dimm_coder,

Indeed. It looks like this is what i need a kernel-mode driver between the TCP/IP layer. I found something useful here: www.ndis.com

Best Regards,
kingkong
kingkong321 at 2007-11-9 13:49:49 >