How does Glasswire capture traffic?


I am checking out this new product and am curious how this product interacts with a given machine. Specifically at what level are you capturing data on the machines network traffic. For example at the application level, adapter level, somewhere in-between?

Would love any info that can explain what technique Glasswire uses to expose and identify the network traffic.

We use a Windows API. We don’t parse packets or anything like that.

Thanks for responding.

I’m interested to learn more about the Windows API that makes this possible. Is there a link you can share?

I will ask about the details. I’m not sure what it’s called.