(With the continuous development of computer networks, network attacks from the data link layer continue to increase, while traditional firewalls do not provide protection at the data link layer. Therefore, a packet filtering method of the data link layer—frame filtering is proposed, and the NDIS intermediate layer driver technology is used to implement it, and finally the function of the analysis system is verified by an example.)