Click here to Skip to main content
12,823,058 members (45,449 online)
Click here to Skip to main content
Add your own
alternative version


71 bookmarked
Posted 11 Apr 2002

RawSocket Class-Create Network Monitoring (Packet Sniffing) Apps

, 11 Apr 2002
Rate this:
Please Sign up or sign in to vote.
A class for creating Network Monitoring Programs


This program illustrates the use of the RawSocket class which is written in C#. The class RawSocket is a packet sniffing class that fires notification events when an IP packet is received. This makes using the class simple. Just declare your RawSocket object, instantiate it, and register to be notified when the event fires.

When the event fires, you are sent event arguments which give your program access to everything in the IP packet including things like IP addresses, port numbers, protocols, message lengths, and of course the message contents.

The included Windows form is a simplified example which basically just shows the origination and destination IP addresses for all incoming packets on a listbox control. The Rawsocket class makes creating more sophisticated network monitoring applications easy.

This program relies on Winsock 2 and runs only on Win2000 or WinXP.

Please email comments and improvements to:

Kember Brown


This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here


About the Author

Lyle Brown
Web Developer
United States United States
Lyle is a computer programmer in Vancouver, Washington.

You may also be interested in...

Comments and Discussions

ayumiaw23-Jan-08 20:32
memberayumiaw23-Jan-08 20:32 
GeneralARP are Packets not capturing Pin
Aniket Salunkhe2-Nov-06 3:00
memberAniket Salunkhe2-Nov-06 3:00 
GeneralExcellent ! Pin
Gil.Y9-Jun-06 2:14
memberGil.Y9-Jun-06 2:14 
QuestionProblems with Thread? Pin
Robse13-Apr-06 14:41
memberRobse13-Apr-06 14:41 
AnswerRe: Problems with Thread? Pin
Red_angelX24-Apr-07 21:55
memberRed_angelX24-Apr-07 21:55 
AnswerRe: Problems with Thread? Pin
sergios_rus10-Jul-07 14:59
membersergios_rus10-Jul-07 14:59 
QuestionWSAIoctl vs. C# Pin
talbot31-Jan-06 6:09
membertalbot31-Jan-06 6:09 
GeneralSending packets received Pin
doctorcpu28-Sep-05 21:28
memberdoctorcpu28-Sep-05 21:28 
GeneralExplain please Pin
Babs20041-Nov-04 14:34
sussBabs20041-Nov-04 14:34 
Generaldocumentation Pin
wassim suleiman23-Jun-04 6:48
memberwassim suleiman23-Jun-04 6:48 
QuestionThe owning process of a connection? Pin
Johan Danforth12-May-04 22:18
memberJohan Danforth12-May-04 22:18 
atu@ds-fr.com3-May-04 6:51
memberatu@ds-fr.com3-May-04 6:51 
BigRedAtwood13-Sep-04 11:41
memberBigRedAtwood13-Sep-04 11:41 
atu@ds-fr.com13-Sep-04 22:45
memberatu@ds-fr.com13-Sep-04 22:45 
Questionhow about reading TCP header? Pin
mehro21-Feb-04 14:30
membermehro21-Feb-04 14:30 
GeneralSpoofing Pin
Fad B5-Feb-04 1:45
memberFad B5-Feb-04 1:45 
GeneralNot Run in Windows98 Pin
sbf200024-Aug-03 17:45
membersbf200024-Aug-03 17:45 
GeneralRe: Not Run in Windows98 Pin
oglodek28-May-04 7:15
memberoglodek28-May-04 7:15 
GeneralDecoding Socket MessageBuffer Pin
Eric Gibson19-Jun-03 5:54
memberEric Gibson19-Jun-03 5:54 
GeneralRe: Decoding Socket MessageBuffer Pin
kikon22-Jul-03 1:05
memberkikon22-Jul-03 1:05 
GeneralRe: Decoding Socket MessageBuffer Pin
Mike Hunt10-Mar-04 19:21
memberMike Hunt10-Mar-04 19:21 
GeneralRe: Decoding Socket MessageBuffer Pin
RKennison9-Jan-05 9:55
memberRKennison9-Jan-05 9:55 
GeneralRe: Decoding Socket MessageBuffer Pin
dfhgesart26-Jan-05 10:28
sussdfhgesart26-Jan-05 10:28 
Questionwrong numberof packets? Pin
princedom27-May-03 8:24
memberprincedom27-May-03 8:24 
QuestionRawSocket to NAT? Pin
dsandor6-May-03 13:36
memberdsandor6-May-03 13:36 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.

Permalink | Advertise | Privacy | Terms of Use | Mobile
Web02 | 2.8.170308.1 | Last Updated 12 Apr 2002
Article Copyright 2002 by Lyle Brown
Everything else Copyright © CodeProject, 1999-2017
Layout: fixed | fluid