RtPacketLogger

RtPacketLogger is a simple filter driver sample that shows how you could develop your own application to log packets to a file in a standard format that is readable by utilities such as:

Wireshark:

(http://www.wireshark.org)

Microsoft Network Monitor:

(http://support.microsoft.com/kb/148942).

This sample works for simple packet transfers; for large quantities of packets, not all data will be logged to the file. RtPacketLogger is hard-coded to log its data to C:\\RtPacketLog.cap.

To use the RtPacketLogger filter with a particular NIC driver, you must:

Register the RtPacketLogger filter as an RTDLL.
Add it to the RtxTcpIp INI file, in the NIC driver's [rtndn] section, using the Filter and FilterState parameters.

Example:

INI file used with Intel 82574L NIC driver and RtPacketLogger.

[TCP/IP]
.
.
.
[rtnd0]
Driver=RTE1000
IPAddr=192.168.4.8

.
.
.
Filter=RTPacketLogger
FilterState=1

NOTE: There are no input parameters or command-line arguments for RtPacketLogger.