UdpIp class

This class is the parent class for UDP/IP events.

The following syntax is simplified from MOF code.

Syntax

[Guid("{bf3a50c5-a9c9-4988-a005-2df0b7c80f80}"), EventVersion(2)]
class UdpIp : MSNT_SystemTrace
{
};

Members

The UdpIp class does not define any members.

Remarks

To enable UDP/IP events in an NT Kernel logging session, specify the EVENT_TRACE_FLAG_NETWORK_TCPIP flag in the EnableFlags member of an EVENT_TRACE_PROPERTIES structure when calling the StartTrace function.

Event trace consumers can implement special processing for UDP/IP events by calling the SetTraceCallback function and specifying UdpIpGuid as the pGuid parameter. Use the following event types to identify the actual network (UDP/IP) event when consuming events.

Event type Description
EVENT_TRACE_TYPE_RECEIVE(Event type value is 11)
Receive event for IPv4 protocol. The UdpIp_TypeGroup1 MOF class defines the event data for this event.
EVENT_TRACE_TYPE_SEND(Event type value is 10)
Send event for IPv4 protocol. The UdpIp_TypeGroup1 MOF class defines the event data for this event.
Event type value, 17 Fail event. The UdpIp_Fail MOF class defines the event data for this event.
Event type value, 26 Send event for IPv6 protocol. The UdpIp_TypeGroup2 MOF class defines the event data for this event.
Event type value, 27 Receive event for IPv6 protocol. The UdpIp_TypeGroup2 MOF class defines the event data for this event.

 

You can trace network events to a source and destination process using the ProcessId property. Because some network events are logged by separate threads, you may not be able to use the ProcessId and ThreadId members of EVENT_TRACE_HEADER to identify the process or thread that originated the network activities.

Requirements

Minimum supported client
Windows Vista [desktop apps only]
Minimum supported server
Windows Server 2008 [desktop apps only]

See also

MSNT_SystemTrace

UdpIp_Fail

UdpIp_TypeGroup1

UdpIp_TypeGroup2

UdpIp_V0

UdpIp_V1