TcpIp class

This class is the parent class for TCP/IP events.

The following syntax is simplified from MOF code.

Syntax

[Guid("{9a280ac0-c8e0-11d1-84e2-00c04fb998a2}"), EventVersion(2)]
class TcpIp : MSNT_SystemTrace
{
};

Members

The TcpIp class does not define any members.

Remarks

To enable TCP/IP events in an NT Kernel logging session, specify the EVENT_TRACE_FLAG_NETWORK_TCPIP flag in the EnableFlags member of an EVENT_TRACE_PROPERTIES structure when calling the StartTrace function.

Event trace consumers can implement special processing for TCP/IP events by calling the SetTraceCallback function and specifying TcpIpGuid as the pGuid parameter. Use the following event types to identify the actual network (TCP/IP) event when consuming events.

Event type Description
EVENT_TRACE_TYPE_ACCEPT(Event type value is 15)
Accept event for IPv4 protocol. The TcpIp_TypeGroup2 MOF class defines the event data for this event.
EVENT_TRACE_TYPE_CONNECT(Event type value is 12)
Connect event for IPv4 protocol. The TcpIp_TypeGroup2 MOF class defines the event data for this event.
EVENT_TRACE_TYPE_DISCONNECT(Event type value is 13)
Disconnect event for IPv4 protocol. The TcpIp_TypeGroup1 MOF class defines the event data for this event.
EVENT_TRACE_TYPE_RECEIVE(Event type value is 11)
Receive event for IPv4 protocol. The TcpIp_TypeGroup1 MOF class defines the event data for this event.
EVENT_TRACE_TYPE_RECONNECT(Event type value is 16)
Reconnect event for IPv4 protocol. (A connect attempt failed and another attempt is made.) The TcpIp_TypeGroup1 MOF class defines the event data for this event.
EVENT_TRACE_TYPE_RETRANSMIT(Event type value is 14)
Retransmit event for IPv4 protocol. The TcpIp_TypeGroup1 MOF class defines the event data for this event.
EVENT_TRACE_TYPE_SEND(Event type value is 10)
Send event for IPv4 protocol. The TcpIp_SendIPV4 MOF class defines the event data for this event.
Event type value, 17 Fail event. The TcpIp_Fail MOF class defines the event data for this event.
Event type value, 18 TCP copy event for IPv4 protocol. The TcpIp_TypeGroup1 MOF class defines the event data for this event.
Event type value, 26 Send event for IPv6 protocol. The TcpIp_SendIPV6 MOF class defines the event data for this event.
Event type value, 27 Receive event for IPv6 protocol. The TcpIp_TypeGroup3 MOF class defines the event data for this event.
Event type value, 28 Connect event for IPv6 protocol. The TcpIp_TypeGroup4 MOF class defines the event data for this event.
Event type value, 29 Disconnect event for IPv6 protocol. The TcpIp_TypeGroup3 MOF class defines the event data for this event.
Event type value, 30 Retransmit event for IPv6 protocol. The TcpIp_TypeGroup3 MOF class defines the event data for this event.
Event type value, 31 Accept event for IPv6 protocol. The TcpIp_TypeGroup4 MOF class defines the event data for this event.
Event type value, 32 Reconnect event for IPv6 protocol. (A connect attempt failed and another attempt is made.) The TcpIp_TypeGroup3 MOF class defines the event data for this event.
Event type value, 34 TCP copy event for IPv6 protocol. The TcpIp_TypeGroup3 MOF class defines the event data for this event.

 

You can trace network events to a source and destination process using the ProcessId property. Because some network events are logged by separate threads, you may not be able to use the ProcessId and ThreadId members of EVENT_TRACE_HEADER to identify the process or thread that originated the network activities.

Requirements

Minimum supported client
Windows Vista [desktop apps only]
Minimum supported server
Windows Server 2008 [desktop apps only]

See also

MSNT_SystemTrace

TcpIp_Fail

TcpIp_SendIPV4

TcpIp_SendIPV6

TcpIp_TypeGroup1

TcpIp_TypeGroup2

TcpIp_TypeGroup3

TcpIp_TypeGroup4

TcpIp_V0

TcpIp_V1