Click here to Skip to main content
Click here to Skip to main content

RawSocket Class-Create Network Monitoring (Packet Sniffing) Apps

, 11 Apr 2002
Rate this:
Please Sign up or sign in to vote.
A class for creating Network Monitoring Programs


This program illustrates the use of the RawSocket class which is written in C#. The class RawSocket is a packet sniffing class that fires notification events when an IP packet is received. This makes using the class simple. Just declare your RawSocket object, instantiate it, and register to be notified when the event fires.

When the event fires, you are sent event arguments which give your program access to everything in the IP packet including things like IP addresses, port numbers, protocols, message lengths, and of course the message contents.

The included Windows form is a simplified example which basically just shows the origination and destination IP addresses for all incoming packets on a listbox control. The Rawsocket class makes creating more sophisticated network monitoring applications easy.

This program relies on Winsock 2 and runs only on Win2000 or WinXP.

Please email comments and improvements to:

Kember Brown


This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here

About the Author

Lyle Brown
Web Developer
United States United States
Lyle is a computer programmer in Vancouver, Washington.

Comments and Discussions

QuestionCAN SOMEONE HELP ME Pinmemberayumiaw23-Jan-08 19:32 
GeneralARP are Packets not capturing PinmemberAniket Salunkhe2-Nov-06 2:00 
GeneralExcellent ! PinmemberGil.Y9-Jun-06 1:14 
QuestionProblems with Thread? PinmemberRobse13-Apr-06 13:41 
AnswerRe: Problems with Thread? PinmemberRed_angelX24-Apr-07 20:55 
AnswerRe: Problems with Thread? Pinmembersergios_rus10-Jul-07 13:59 
QuestionWSAIoctl vs. C# Pinmembertalbot31-Jan-06 5:09 
GeneralSending packets received Pinmemberdoctorcpu28-Sep-05 20:28 
GeneralExplain please PinsussBabs20041-Nov-04 13:34 
Generaldocumentation Pinmemberwassim suleiman23-Jun-04 5:48 
QuestionThe owning process of a connection? PinmemberJohan Danforth12-May-04 21:18 
GeneralDHCPDISCOVER Pinmemberatu@ds-fr.com3-May-04 5:51 
GeneralRe: DHCPDISCOVER PinmemberBigRedAtwood13-Sep-04 10:41 
GeneralRe: DHCPDISCOVER Pinmemberatu@ds-fr.com13-Sep-04 21:45 
Questionhow about reading TCP header? Pinmembermehro21-Feb-04 13:30 
GeneralSpoofing PinmemberFad B5-Feb-04 0:45 
GeneralNot Run in Windows98 Pinmembersbf200024-Aug-03 16:45 
GeneralRe: Not Run in Windows98 Pinmemberoglodek28-May-04 6:15 
GeneralDecoding Socket MessageBuffer PinmemberEric Gibson19-Jun-03 4:54 
GeneralRe: Decoding Socket MessageBuffer Pinmemberkikon22-Jul-03 0:05 
GeneralRe: Decoding Socket MessageBuffer PinmemberMike Hunt10-Mar-04 18:21 
GeneralRe: Decoding Socket MessageBuffer PinmemberRKennison9-Jan-05 8:55 
GeneralRe: Decoding Socket MessageBuffer Pinsussdfhgesart26-Jan-05 9:28 
Questionwrong numberof packets? Pinmemberprincedom27-May-03 7:24 
QuestionRawSocket to NAT? Pinmemberdsandor6-May-03 12:36 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.

| Advertise | Privacy | Mobile
Web02 | 2.8.140709.1 | Last Updated 12 Apr 2002
Article Copyright 2002 by Lyle Brown
Everything else Copyright © CodeProject, 1999-2014
Terms of Service
Layout: fixed | fluid