TcpIp class
This class is the parent class for TCP/IP events.
The following syntax is simplified from MOF code.
Syntax
[Guid("{9a280ac0-c8e0-11d1-84e2-00c04fb998a2}"), EventVersion(2)]
class TcpIp : MSNT_SystemTrace
{
};
Members
The TcpIp class does not define any members.
Remarks
To enable TCP/IP events in an NT Kernel logging session, specify the EVENT_TRACE_FLAG_NETWORK_TCPIP flag in the EnableFlags member of an EVENT_TRACE_PROPERTIES structure when calling the StartTrace function.
Event trace consumers can implement special processing for TCP/IP events by calling the SetTraceCallback function and specifying TcpIpGuid as the pGuid parameter. Use the following event types to identify the actual network (TCP/IP) event when consuming events.
| Event type | Description |
|---|---|
| EVENT_TRACE_TYPE_ACCEPT(Event type value is 15) |
Accept event for IPv4 protocol. The TcpIp_TypeGroup2 MOF class defines the event data for this event. |
| EVENT_TRACE_TYPE_CONNECT(Event type value is 12) |
Connect event for IPv4 protocol. The TcpIp_TypeGroup2 MOF class defines the event data for this event. |
| EVENT_TRACE_TYPE_DISCONNECT(Event type value is 13) |
Disconnect event for IPv4 protocol. The TcpIp_TypeGroup1 MOF class defines the event data for this event. |
| EVENT_TRACE_TYPE_RECEIVE(Event type value is 11) |
Receive event for IPv4 protocol. The TcpIp_TypeGroup1 MOF class defines the event data for this event. |
| EVENT_TRACE_TYPE_RECONNECT(Event type value is 16) |
Reconnect event for IPv4 protocol. (A connect attempt failed and another attempt is made.) The TcpIp_TypeGroup1 MOF class defines the event data for this event. |
| EVENT_TRACE_TYPE_RETRANSMIT(Event type value is 14) |
Retransmit event for IPv4 protocol. The TcpIp_TypeGroup1 MOF class defines the event data for this event. |
| EVENT_TRACE_TYPE_SEND(Event type value is 10) |
Send event for IPv4 protocol. The TcpIp_SendIPV4 MOF class defines the event data for this event. |
| Event type value, 17 | Fail event. The TcpIp_Fail MOF class defines the event data for this event. |
| Event type value, 18 | TCP copy event for IPv4 protocol. The TcpIp_TypeGroup1 MOF class defines the event data for this event. |
| Event type value, 26 | Send event for IPv6 protocol. The TcpIp_SendIPV6 MOF class defines the event data for this event. |
| Event type value, 27 | Receive event for IPv6 protocol. The TcpIp_TypeGroup3 MOF class defines the event data for this event. |
| Event type value, 28 | Connect event for IPv6 protocol. The TcpIp_TypeGroup4 MOF class defines the event data for this event. |
| Event type value, 29 | Disconnect event for IPv6 protocol. The TcpIp_TypeGroup3 MOF class defines the event data for this event. |
| Event type value, 30 | Retransmit event for IPv6 protocol. The TcpIp_TypeGroup3 MOF class defines the event data for this event. |
| Event type value, 31 | Accept event for IPv6 protocol. The TcpIp_TypeGroup4 MOF class defines the event data for this event. |
| Event type value, 32 | Reconnect event for IPv6 protocol. (A connect attempt failed and another attempt is made.) The TcpIp_TypeGroup3 MOF class defines the event data for this event. |
| Event type value, 34 | TCP copy event for IPv6 protocol. The TcpIp_TypeGroup3 MOF class defines the event data for this event. |
You can trace network events to a source and destination process using the ProcessId property. Because some network events are logged by separate threads, you may not be able to use the ProcessId and ThreadId members of EVENT_TRACE_HEADER to identify the process or thread that originated the network activities.
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client |
Windows Vista [desktop apps only] |
| Minimum supported server |
Windows Server 2008 [desktop apps only] |
See also
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for