[ocante]

Vadim,

It seems that you need to create as many instances of CNdisApi as there are network interfaces. Can you confirm this?

Regards,

Olivier

[ocante]

Hi Vadim

I want to capture the traffic on several network interfaces. Can I do this in N threads running in parallel with a single instance of CNdisApi, each thread calling Read in a loop on N separate instances of ETH_REQUEST?

Another question: I want to know the timestamp of captured packets. Does the api allow me to do this? If not, can I assume that the timestamp at the time of the Read call is the timestamp of the packet?

Translated with DeepL.com (free version)

[ocante]

Vadim

Is it possible to set a filter to capture only TCP packets in the connection and disconnection phases (SYN, SYN ACK, RST, FIN)?

Best regards,

Olivier

[Author]

Posts