title: NDIS Hook sendPacketsHandler
body: <p>I use <code>NdisRegisterProtocol()</code> to register a protocol driver, and use <code>_NDIS_OPEN_BLOCK</code> and <code>_NDIS_PROTOCOL_BLOCK</code> structures to hook the <code>ReceivePacketHandler</code> successful, use MyRecivePacket() to instead of NDIS receive packet functions, when I open a website, <code>MyRecievePacket()</code> will be run. </p>
  
  <p>My question is:
  When I open a website(like <code>www.stackoverflow.com</code>) using <code>IE</code>, how can I hook the <code>SendPacketsHandler</code> to get this packet and get the url <code>www.stackoverflow.com</code> string. In other words, how to capture the url in kernel mode.   thanks</p>