This does not sound like a practical solution to the problem as the cell modem IP can change from one data session to the next (it’s not static). In addition the WiFi IP address will change as we the computer associates with different access points. This leaves me without a way tabulate how much traffic was due to cellular usage vs Wi-Fi.
Isn’t Windows 7 version of the “Local Network Monitor API” implemented using a Transport Layer Callout Driver. If this is the case you could just expose the ‘FWPS_FIELD_ALE_AUTH_CONNECT_V4_INTERFACE_TYPE’ field?