// pktmonnpik.h

typedef struct _PKTMON_EVT_STREAM_PACKET_DESCRIPTOR {
  ULONG PacketOriginalLength;
  ULONG PacketLoggedLength;
  ULONG PacketMetaDataLength;
} PKTMON_EVT_STREAM_PACKET_DESCRIPTOR;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ns-pktmonnpik-pktmon_evt_stream_packet_descriptor)

Description

The PKTMON_EVT_STREAM_PACKET_DESCRIPTOR structure contains a packet descriptor used for event streaming.

Members

`PacketOriginalLength`

The original packet length.

`PacketLoggedLength`

Represents the length of the part of the packet that was logged. This will be same as PacketOriginalLength if the packet was not truncated when logged, otherwise it will be shorter.

`PacketMetaDataLength`

Length of the metadata.

[!NOTE] It's important to rely on PacketMetaDataLength instead of the size of structure PKTMON_EVT_STREAM_METADATA as this structure might increase in size in future releases.

PKTMON_EVT_STREAM_PACKET_DESCRIPTOR - NtDoc