Application layer?

Discussion in 'NOD32 version 2 Forum' started by opusthe2nd, Oct 2, 2006.

Thread Status:
Not open for further replies.
  1. opusthe2nd

    opusthe2nd Registered Member

    Joined:
    Aug 11, 2006
    Posts:
    8
  2. alglove

    alglove Registered Member

    Joined:
    Jan 17, 2005
    Posts:
    904
    Location:
    Houston, Texas, USA
    More towards the application level... probably around the session layer (layer 5) if I had to guess an exact location.

    The IMON module of NOD32 is implemented as a Layered Service Protocol (LSP) within Winsock. Think of an LSP as a "plugin". Winsock acts as an interface in Windows between the applications and the transport layer (layer 4). In effect, IMON intercepts traffic coming in at the port level (port 110 for POP3 scanning... ports 80, 8080, 3128, etc. for HTTP traffic) and then scans it before passing it along to the application.

    That's my take on it, anyway. Another link to look at: http://en.wikipedia.org/wiki/OSI_model
     
  3. opusthe2nd

    opusthe2nd Registered Member

    Joined:
    Aug 11, 2006
    Posts:
    8
    Great answer....thank you.
     
Thread Status:
Not open for further replies.