Click here to Skip to main content
Click here to Skip to main content
Go to top

RawSocket Class-Create Network Monitoring (Packet Sniffing) Apps

, 11 Apr 2002
Rate this:
Please Sign up or sign in to vote.
A class for creating Network Monitoring Programs


This program illustrates the use of the RawSocket class which is written in C#. The class RawSocket is a packet sniffing class that fires notification events when an IP packet is received. This makes using the class simple. Just declare your RawSocket object, instantiate it, and register to be notified when the event fires.

When the event fires, you are sent event arguments which give your program access to everything in the IP packet including things like IP addresses, port numbers, protocols, message lengths, and of course the message contents.

The included Windows form is a simplified example which basically just shows the origination and destination IP addresses for all incoming packets on a listbox control. The Rawsocket class makes creating more sophisticated network monitoring applications easy.

This program relies on Winsock 2 and runs only on Win2000 or WinXP.

Please email comments and improvements to:

Kember Brown


This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here


About the Author

Lyle Brown
Web Developer
United States United States
Lyle is a computer programmer in Vancouver, Washington.

Comments and Discussions

QuestionCAN SOMEONE HELP ME Pinmemberayumiaw23-Jan-08 19:32 
GeneralARP are Packets not capturing PinmemberAniket Salunkhe2-Nov-06 2:00 
GeneralExcellent ! PinmemberGil.Y9-Jun-06 1:14 
QuestionProblems with Thread? PinmemberRobse13-Apr-06 13:41 
AnswerRe: Problems with Thread? PinmemberRed_angelX24-Apr-07 20:55 
AnswerRe: Problems with Thread? Pinmembersergios_rus10-Jul-07 13:59 
QuestionWSAIoctl vs. C# Pinmembertalbot31-Jan-06 5:09 
GeneralSending packets received Pinmemberdoctorcpu28-Sep-05 20:28 
GeneralExplain please PinsussBabs20041-Nov-04 13:34 
Generaldocumentation Pinmemberwassim suleiman23-Jun-04 5:48 
QuestionThe owning process of a connection? PinmemberJohan Danforth12-May-04 21:18 
GeneralDHCPDISCOVER Pinmemberatu@ds-fr.com3-May-04 5:51 
GeneralRe: DHCPDISCOVER PinmemberBigRedAtwood13-Sep-04 10:41 
GeneralRe: DHCPDISCOVER Pinmemberatu@ds-fr.com13-Sep-04 21:45 
Questionhow about reading TCP header? Pinmembermehro21-Feb-04 13:30 
GeneralSpoofing PinmemberFad B5-Feb-04 0:45 
GeneralNot Run in Windows98 Pinmembersbf200024-Aug-03 16:45 
GeneralRe: Not Run in Windows98 Pinmemberoglodek28-May-04 6:15 
GeneralDecoding Socket MessageBuffer PinmemberEric Gibson19-Jun-03 4:54 
GeneralRe: Decoding Socket MessageBuffer Pinmemberkikon22-Jul-03 0:05 
GeneralRe: Decoding Socket MessageBuffer PinmemberMike Hunt10-Mar-04 18:21 
GeneralRe: Decoding Socket MessageBuffer PinmemberRKennison9-Jan-05 8:55 
GeneralRe: Decoding Socket MessageBuffer Pinsussdfhgesart26-Jan-05 9:28 
Questionwrong numberof packets? Pinmemberprincedom27-May-03 7:24 
QuestionRawSocket to NAT? Pinmemberdsandor6-May-03 12:36 
AnswerRe: RawSocket to NAT? Pinmembersatyres12-Jun-12 23:37 
QuestionWhat does this do? Pinmemberwarmace7-Apr-03 18:40 
AnswerRe: What does this do? PinsussAnonymous18-Apr-03 5:09 
GeneralSender PinmemberGary Brewer2-Apr-03 4:09 
GeneralRe: Sender PinsussAnonymous18-Apr-03 5:12 
GeneralRe: Sender PinmemberGary Brewer22-Apr-03 4:54 version PinsussCalamitous2-Sep-02 23:00 
GeneralPackets length PinsussPyt15-Aug-02 4:25 
GeneralRe: Packets length PinsussLyle Smith15-Aug-02 6:39 
GeneralRe: Packets length PinmemberPyt15-Aug-02 14:55 
GeneralRe: Packets length Pinsusslye brown19-Aug-02 5:33 
GeneralRe: Packets length PinsussDain18-Sep-02 4:25 
GeneralBug SIO_RCVALL PinmemberPaul ODell17-Jun-02 9:45 
GeneralRe: Bug SIO_RCVALL PinmemberLyle Brown18-Jun-02 10:56 
GeneralRe: Bug SIO_RCVALL Pinmembersummo17-Jan-03 5:19 
GeneralRe: Bug SIO_RCVALL PinsussAnonymous30-Jan-03 19:42 
GeneralRe: Bug SIO_RCVALL Pinmemberfarfaraway18-Nov-03 21:55 
QuestionHow about a C++ version? PinmemberMcGarrah15-Apr-02 3:14 
AnswerRe: How about a C++ version? PinmemberAmit Dey15-Apr-02 6:03 
AnswerRe: How about a C++ version? PinmemberKember Brown15-Apr-02 8:42 
AnswerRe: How about a C++ version? Pinsuss5.5 cents25-Nov-03 21:28 
GeneralUnexplained PinmemberNick Parker13-Apr-02 1:55 
GeneralRe: Unexplained PinmemberKember Brown13-Apr-02 13:30 
GeneralSomething's missing PinmemberJason Douglas12-Apr-02 9:29 
GeneralRe: Something's missing PinmemberNish [BusterBoy]12-Apr-02 17:50 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.

| Advertise | Privacy | Mobile
Web01 | 2.8.140916.1 | Last Updated 12 Apr 2002
Article Copyright 2002 by Lyle Brown
Everything else Copyright © CodeProject, 1999-2014
Terms of Service
Layout: fixed | fluid