NPP Interfaces
Network packet providers (NPPs) provide COM interfaces that are called by NPP applications, and Network Monitor. When you call CreateNPPInterface, remember that each NPP is represented as a single in-process COM object. Applications can instantiate any number of NPP objects. However, each instantiated object must use one—and only one—of the five NPP interfaces.
Note also that different NPP interfaces provide network data in various forms. For example, Network Monitor uses the IDelaydC interface to capture network traffic and save it to a capture file; while monitors use the IRTC interface to capture real time network traffic. The following table describes Network Monitor NPP interfaces.
| Interface | Description |
|---|---|
| IDelaydC | Captures network traffic that is stored in a capture file. This interface is used by Network Monitor and NPP applications. |
| IESP | Captures network traffic that is stored in a capture file and provides enhanced statistics in a special ESP file format. This interface is used by NPP applications |
| IRTC | Captures real time network traffic and triggers events when they occur. This interface is used by monitors and NPP applications. |
| IStats | Retrieves statistics as raw data rather than frames. This interface is used by NPP applications such as Perfmon. |