I've made use of a very powerful firewall on windows xp for some time. I like it's capabilitys in giving me information on the intruder as well, it constantly sniffs the activitys of all active programs to find malitious activity and scripts. the fire wall is blackice and i love it. What i'm looking to have answered is what do you use to decompile a windows program with ubuntus distro and how do i identify the windows portion and give it a new language to perform the same function on linux? To also, a definition or a point in the direction to what legalitys would be found with such a performance.
closed as off-topic by dobey, karel, Avinash Raj, Warren Hill, psusi Dec 19 '13 at 14:49
This question appears to be off-topic. The users who voted to close gave this specific reason:
:) I am afraid, all of it is the windows portion. So this part is easy.
You have to write something like that new, using Linux compatible API calls and libraries. You can choose almost any programming language you are familiar with.
For Linux look at iptables; see how to hook in kernel to receive network events, figure out how they do map to running apps, using /proc data.