Capture incoming and outgoing packets

Nov 8, 2010 at 11:31 AM

Anyone can share idea how to asynchronously capture incoming and outgoing packets (sniffing) without disconnecting the TCP/IP session? I'm using this component now however I can only read one direction at a time.


Nov 28, 2010 at 10:15 AM

I don't think I understand.

Sniffing doesn't change the packets transmitted so why would it disconnect the TCP/IP session?


Jan 12, 2011 at 7:41 AM

Hi Boaz,

I got your point since it does not interact directly with NDIS, the reason I raised this question is that I'm creating a middle-ware application using this component that needs to store & forward raw packets.

By the way, can I tag each outgoing packets or put additional identification so that whenever the remote host response back I can be able to identify that specific response?



Jan 12, 2011 at 8:55 PM

Hi techguy0727,


You can use any packet field (for example, IPv4 identification number) to tag packets.

This has nothing to do with Pcap.Net, it's up to your network and protocols.

Pcap.Net just enables you to change any part of the packet easily.