capture network traffic on windows ce
2010-05-14 19:11
281 查看
When developing network applications, it's always necessary to capture network traffic. Windows ce has built-in sniffer tool, netlog for this purpose. It captures network traffics to a file that can be examined with wireshark or network monitor.
To enable it, we need to select NDIS Packet Capturing DLL and NDIS User-mode I/O Protocol Driver in visual studio, as shown below.
![](http://farm4.static.flickr.com/3572/4606363846_0c455294b0_o.png)
Then, we can capture network traffic with following commands.
1. set capture file lacation:
netlogctl file "/Storage Card/net"2. start capture
netlogctl start3. perform network activities
4. stop capture
netlogctl stop5. copy /Storage Card/net.cap[i].cap to computer and open with wireshark
NetLogctl usage:
netlogctl start - start the loggging.
netlogctl load - start the loggging.
netlogctl stop - stops the loggging.
netlogctl unload - causes networking to unload the netlog component. (may destabilize system)
netlogctl pkt_size XX - sets maximum packet size captured.
netlogctl cap_size XX - sets maximum size of half capture file.
netlogctl file XXX - sets the name of the file to log.
netlogctl usb XXX - 1 => log usb , 0 => stop logging usb.
netlogctl state - print state.
netlogctl trace - print trace message state for all modules.
netlogctl trace <module> - print trace message state for specified module.
netlogctl trace <module> <filter> - set trace message state for specified module.
To enable it, we need to select NDIS Packet Capturing DLL and NDIS User-mode I/O Protocol Driver in visual studio, as shown below.
![](http://farm4.static.flickr.com/3572/4606363846_0c455294b0_o.png)
Then, we can capture network traffic with following commands.
1. set capture file lacation:
netlogctl file "/Storage Card/net"2. start capture
netlogctl start3. perform network activities
4. stop capture
netlogctl stop5. copy /Storage Card/net.cap[i].cap to computer and open with wireshark
NetLogctl usage:
netlogctl start - start the loggging.
netlogctl load - start the loggging.
netlogctl stop - stops the loggging.
netlogctl unload - causes networking to unload the netlog component. (may destabilize system)
netlogctl pkt_size XX - sets maximum packet size captured.
netlogctl cap_size XX - sets maximum size of half capture file.
netlogctl file XXX - sets the name of the file to log.
netlogctl usb XXX - 1 => log usb , 0 => stop logging usb.
netlogctl state - print state.
netlogctl trace - print trace message state for all modules.
netlogctl trace <module> - print trace message state for specified module.
netlogctl trace <module> <filter> - set trace message state for specified module.
相关文章推荐
- capture network traffic on windows ce
- share network connection on windows
- Establish dial-up network by programming on Windows
- Enabling ClearType on Windows CE 6.0
- How To Capture Data Packets On A Network Using Wireshark (a. k. a. Ethereal)
- DumpMem and Monster - Virtual Memory Explorers on Windows Mobile/CE
- use googletest on windows ce
- tcpdump - dump traffic on a network
- Fix “Windows was unable to find a certificate to log you on to the network”
- How to Monitor and Log Network Traffic on Linux Using vnStat
- How to Monitor and Log Network Traffic on Linux Using vnStat
- use googletest on windows ce
- Install network printer on Windows 7 Ultimate X64
- How To Capture Data Packets On A Network Using Wireshark (a. k. a. Ethereal)
- Get all running services on Windows CE
- Implement the OEM Power Management on Windows CE
- Windows Azure Virtual Network Connect & Traffic Manager Note
- Bus Hound 6.01 capture on Windows XP
- Record network traffic on Android or IOS with Charlies' Proxy or WireShark
- Will Windows CE 5.0 apps run on Windows CE 6.0