WskSendTo trace events not seen on ETL file

  • Thread starter Thread starter Boomi.s
  • Start date Start date
B

Boomi.s

Guest
Hi All,

I am new to network programming and implementing a driver that uses Winsock. My driver writing to sockets using WskSendTo() function. WskSendTo() returns STATUS_SUCCESS and I could see the same packets written by the driver on the Wireshark capture. But when i captured the events for the provider "Microsoft-Windows-Winsock-AFD", i am not seeing any socket write events, i am expecting something like

sendto: 0: Process 0xFFFF840FAB4E5080, Endpoint 0xFFFF840FB0B439E0, Buffer Count 1, Buffer 0xFFFF840FB04B31B8, Length 148, Addr xxx.xx.xxx.xx:12345, Seq 3100, Status STATUS_SUCCESS

so i am confused whether the packets are actually written to the socket or not. Could you please help me on this issue.


Thanks,

Boomi

Continue reading...
 
Back
Top