Selecting an NPP Interface

Network packet providers (NPPs) expose the IDelaydC, IESP, IRTC, and IStats interfaces. Each of these interfaces provides similar methods for connecting the NPP to the network, capturing network traffic, and collecting statistical information about the captured data. To choose which interface to use, refer to the following table.

Note  When you connect an NPP to the network with one of these interfaces, you can only use the methods provided by that interface. For example, if you connect to the network using the IRTC interface and then try to start a capture with IDelaydC, your call to start the capture will fail, and an error code will be returned.

Interface	When to use
IDelaydC	Use to capture network traffic and store it in a capture file. This interface is used by the Network Monitor UI and other NPP applications, which require storing captured network information.
IESP	Used to provide enhanced statistics in a special ESP file format. This interface is used by NPP applications that require the enhanced statistics provided by the ESP format.
IRTC	Use to capture real-time network traffic and to trigger events when they occur. This interface is used by NPP applications that require run-time captures. Note that this interface does not provide the statistics that the other NPP interfaces provide, nor does it allow you to insert frames into the captured network traffic.
IStats	Use to retrieve capture statistics but not the captured frames.