Why the trace size the same? about winipt HOT 2 CLOSED

I want to know does ipt.sys support ip range fiters, i did not see this function in you project. Does ipt.sys support? Or u did not complete this function on your tool? I would like help to complete this function if possible! Tks

from winipt.

Hi,

Please open new issues instead of re-using the same one in the future.

IP Range filters are not supported by the functionality that Ipt.sys exposes, sorry. There is nothing the tool can do about this.

BlackLuny: The trace size rolls over once the buffer is full, so it never changes. This is normal IPT behavior (please see the manual). Unfortunately, the only way to know that you got all of the data is to keep pulling and use the 'offset' field to know how far along in the trace you've gone. Choosing a bigger trace file will avoid rollovers. Hope this helps.

from winipt.