Is it possible to "hook" Internet Connection Sharing to log url

ICS in Windows 2000 has worked well for me, but it is very limited in its current implementation. Proxy servers like AnologX (no logging) and CCProxy, work but not as well as ICS.

I know that it is possible to hook dll's and do things such as reveal a masked password in an application or a web page.

Similarly, it seems possible that one may be able to "hook" the ICS service and get the IP Address and Url when it is requested.

Where to start??? Any ideas? Thanks for any suggestions.


:wave:

Here is where I am starting...

9 files added to Windows\System

Dynamic-link libraries:
Icsapi32.dll, Icsconfg.dll, Issetup.dll

Executables:
Icssetup.exe, Icsclset.exe, Icsmgr.exe

Virtual device drivers:
Icshare.vxd, Icsharep.vxd

Text:
Icsrm.txt

Registry Key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ICSharing


ICS exploits NAT by setting up your ICS host as a router.