Constants

All constants are accessible through the pcapfilter.Constants class.

Install Flags

INSTALL_REMOVE_OLD_VERSIONS
Value: 0x00000001
Uninstall drivers from previous class versions (e.g., 2022).
INSTALL_KEEP_START_TYPE
Value: 0x00000002
Keep the driver's current start type setting in the registry. If this flag is not set (default), the installation logic will reset the driver's start type setting in the Windows registry to the default value. Setting this flag causes the installation logic to preserve the current value, which may be necessary if the user (or the application) set it previously.
INSTALL_OVERWRITE_SAME_VERSION
Value: 0x00000004
Install the driver file when its version and build number is the same as the version of the already installed driver.

Packet Actions

PACKET_ACTION_DROP
Value: 0x01
The packet is dropped (discarded).
PACKET_ACTION_CAPTURE
Value: 0x02
The packet is captured with the possibility to modify it in the event handler. The Packet event is fired for captured packets with an option to modify the packet contents and send the modified packet.
PACKET_ACTION_NOTIFY
Value: 0x03
The driver asynchronously notifies about the packet, not taking any specific action in regard to it. The NotifyPacket event is fired for captured packets.

Packet directions

PACKET_DIRECTION_ANY
Value: 0x00
All packets are processed.
PACKET_DIRECTION_INCOMING
Value: 0x01
Incoming packets are processed.
PACKET_DIRECTION_OUTGOING
Value: 0x02
Outgoing packets are processed.

Operation modes

PCAP_MODE_CAPT
Value: 0x00
Capture mode. Individual packets are reported through the Packet event as they are received from the network driver. Only packets that match the filter criteria specified in Filter and Direction will trigger the event.
PCAP_MODE_STAT
Value: 0x01
Statistical mode. The class does not report individual packets. Instead, it will collect packet statistics and provide aggregated packet data via the Statistics event.

Uninstall Version Flags

UNINSTALL_VERSION_PREVIOUS
Value: 0x00000001
Uninstall modules from previous product versions.

Note: This functionality is only available in Windows.

UNINSTALL_VERSION_CURRENT
Value: 0x00000002
Uninstall modules from the current product version.

Note: This functionality is only available in Windows.

UNINSTALL_VERSION_ALL
Value: 0x00000003
Uninstall modules from all product versions.

Note: This functionality is only available in Windows.

Module Status Flags

MODULE_STATUS_NOT_PRESENT
Value: 0x00000000
The specified module is not present on the system.

Note: This functionality is only available in Windows.

MODULE_STATUS_STOPPED
Value: 0x00000001
The specified module is in the Stopped state.

Note: This functionality is only available in Windows.

MODULE_STATUS_RUNNING
Value: 0x00000004
The specified module is loaded and running.

Note: This functionality is only available in Windows.