RawPacket

The RawPacket class represents a single raw network packet intercepted by the filter driver.

Properties & Usage

  • Buffer: Raw byte buffer containing the Ethernet frame.
  • DeviceFlags: Direction flag indicating whether the packet was captured on send or receive.
  • AdapterHandle: Handle of the adapter associated with the packet.

Modern .NET 8.0 implementations utilize Span<byte> and Memory<byte> over INTERMEDIATE_BUFFER structures via NdisApiDotNet.