This solutions includes adopting the NDIS protocol driver as packet capture module , the KPF filter as packet filter which came from the revising and improving of the BPF filter, HyperCuts with rule updating ability as packet classification algorithm. .

• 该方案包括以NDIS协议驱动程序实现报文捕获、以对BPF过滤器改进和增强后的KPF为报文过滤器,以增加了规则更新能力的HyperCuts算法为报文分类算法。