Reset packet tracking

[xeron333]

Hello,
I noticed the following problem using SharpPcap: when I leave the program and returned to it a while later (approximately 5 minutes at most), I noticed that SharpPcap displays packets from a site even if I don't go to it. Note that the packets correspond to a previous navigation (the famous SharpPcap downtime). Is there a way to "reset" packet reception when I start SharpPcap?

Système Windows .Net Frameworks 4.8

https://github.com/xeron333/TSharpPcap/blob/main/Ex3_2_Processing2.cs

[kayoub5]

I am not sure what you mean by “reset“ or “famous SharpPcap downtime“

Looking at the code you provided, you seem to be logging to the console, typically logging to console is extremely slow, and not recommended especially in time critical functions like packet processing.

[xeron333]

Hello, by "reset," I meant, when I start SharpPcap, to ignore packets arrived before I use SharpPcap, and by "famous SharpPcap downtime," simply the time when i'm stopping SharpPcap and i restarting it.

you say "Looking at the code you provided, you seem to be logging to the console, typically logging to console is extremely slow, and not recommended especially in time critical functions like packet processing._"

I was inspired by your example, which does the same thing by creating C# code for a console application.
How to do it then?

[kayoub5]

I was inspired by your example, which does the same thing by creating C# code for a console application.

Doing Console.WriteLine for each packet, works for small examples, but not when you have a LOT of traffic.

Hello, by "reset," I meant, when I start SharpPcap, to ignore packets arrived before I use SharpPcap, and by "famous SharpPcap downtime," simply the time when i'm stopping SharpPcap and i restarting it.

I still don't get what you mean, SharpPcap is a library, not an application, there is no "stop sharpcpap" or "start sharppcap" function.

[xeron333]

Ok thank you, I did the test without the "write" I didn't see any difference, the problem that I mentioned to you is not a very serious or very disabling problem; If necessary, i can simply ignore the match alerts between the IPs and/or hostnames found by SharpPcap, however even if I know that this is not a problem concerning your subject, do you know how to intercept http requests; which would allow you to code exactly on this event and not on the arrival of the packets?

[kayoub5]

Sorry, but I don't get what you mean.

[xeron333]

Okay, it's hard to make yourself understood when you don't speak the same language, but thanks anyway.bye