Access Resouce Monitor (Network Actitivy) data programmatically

Question

I really need to get data that is displayed in Resource Monitor on Network tab in "Network Actitivy" from my programm (I need get network activity for particular processes). Is there any programmatical way for that? M.b. API?

Answer 1

You can use ETW tracing to get all the network activity data in Resouce Monitor. The events you are looking for are TcpIp/Udp Send and Receive events.

Here are some of the event schema.
TcpIp_SendIPV4: http://msdn.microsoft.com/en-us/library/aa964829(VS.85).aspx
UdpIp_IPV6: http://msdn.microsoft.com/en-us/library/aa964856(VS.85).aspx

Some important ETW Tracing APIs are OpenTrace/CloseTrace/EnableTraceEx/ProcessTrace. You can find more info here: http://msdn.microsoft.com/en-us/library/aa364158(VS.85).aspx

Hope this helps.

Answer 2

You can use ETW tracing to get all the network activity data in Resouce Monitor. The events you are looking for are TcpIp/Udp Send and Receive events.

Here are some of the event schema.
TcpIp_SendIPV4: http://msdn.microsoft.com/en-us/library/aa964829(VS.85).aspx
UdpIp_IPV6: http://msdn.microsoft.com/en-us/library/aa964856(VS.85).aspx

Some important ETW Tracing APIs are OpenTrace/CloseTrace/EnableTraceEx/ProcessTrace. You can find more info here: http://msdn.microsoft.com/en-us/library/aa364158(VS.85).aspx

Hope this helps.

Very useful. Is the usage of ETW API the same or different from each other according to different versions of Windows? Do I have to research on each API on different version?

Answer 3

Hi Michelle,

No, the usage of ETW API is the same for XP/Vista/Windows 7. As long as it works on one version of Windows, it will work on others as well.

 

Answer 4

Hi Xingchi, Micheele is just a spam bot who use phrases vague enough to fit in every question in order to disguise hidden link seo spams in a wide range of forums without changing the phrase too often. 

---

---

The following is signature, not part of post
Please mark the post answered your question as the answer, and mark other helpful posts as helpful, so they will appear differently to other users who are visiting your thread for the same problem.
Visual C++ MVP