NPP Interfaces

Network packet providers (NPPs) provide COM interfaces that are called by NPP applications, and Network Monitor. When you call CreateNPPInterface, remember that each NPP is represented as a single in-process COM object. Applications can instantiate any number of NPP objects. However, each instantiated object must use one—and only one—of the five NPP interfaces.

Note also that different NPP interfaces provide network data in various forms. For example, Network Monitor uses the IDelaydC interface to capture network traffic and save it to a capture file; while monitors use the IRTC interface to capture real time network traffic. The following table describes Network Monitor NPP interfaces.

Interface	Description
IDelaydC	Captures network traffic that is stored in a capture file. This interface is used by Network Monitor and NPP applications.
IESP	Captures network traffic that is stored in a capture file and provides enhanced statistics in a special ESP file format. This interface is used by NPP applications
IRTC	Captures real time network traffic and triggers events when they occur. This interface is used by monitors and NPP applications.
IStats	Retrieves statistics as raw data rather than frames. This interface is used by NPP applications such as Perfmon.