IRTC
The IRTC interface provides the methods used to connect the NPP to the network, capture network traffic, retrieve statistics, and disconnect the NPP from the network. IRTC gets an interface to local-only entry points, which are necessary to engage in real-time capture. This interface includes a method that hands off a callback to the NPP.
Methods in Vtable Order
The IRTC interface inherits the methods of the IUnknown interface.
In addition, IRTC defines the following methods.
| Method | Description |
|---|---|
| Connect | Connects the NPP to the network. |
| Disconnect | Disconnects the NPP from the network. |
| QueryStatus | Retrieves the status of the NPP. |
| Configure | Sets the trigger, pattern match, and buffer size of the capture. |
| Start | Starts a capture. |
| Pause | Temporarily stops the current capture. |
| Resume | Restarts a paused capture. |
| Stop | Stops the current capture. |
| GetControlState | Retrieves the state of the capture, which indicates if the capture is running or paused. |
| GetTotalStatistics | Extracts time, buffer, driver, and other network statistics from the currently running capture. |
| GetConversationStatistics | Retrieves session and station information for the current capture. |
| QueryStations | Retrieves a list of all computers on a subnet that are using Network Monitor to capture network data. |
Requirements
| Client | Requires Windows XP, Windows 2000 Professional, or Windows NT Workstation 4.0. |
| Server | Requires Windows Server 2003, Windows 2000 Server, or Windows NT Server 4.0. |
| Header | Declared in Netmon.h. |
| DLL | Requires Ndisnpp.dll. Requires Rmtnpp.dll. |