This is a partial report from Wireshark, I need to do this in my program. How would I get same info with winsock?
No. Time Source Destination Protocol Length Info
67 20.309244000 192.168.1.27 192.168.1.20 MDNS 214 Standard query response 0x0000 PTR ipcamera(id:E8ABFA182279, alias:Und Deck - Wireless)._http._tcp.local
Frame 67: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) on interface 0
Interface id: 0
WTAP_ENCAP: 1
Arrival Time: Feb 8, 2013 13:59:18.741482000 Eastern Standard Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1360349958.741482000 seconds
[Time delta from previous captured frame: 0.167049000 seconds]
[Time delta from previous displayed frame: 0.167049000 seconds]
[Time since reference or first frame: 20.309244000 seconds]
Frame Number: 67
Frame Length: 214 bytes (1712 bits)
Capture Length: 214 bytes (1712 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ip:udp:dns]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: B-LinkEl_4f:cf:d1 (48:02:2a:4f:cf:d1), Dst: HonHaiPr_14:7b:84 (78:e4:00:14:7b:84)
Destination: HonHaiPr_14:7b:84 (78:e4:00:14:7b:84)
Source: B-LinkEl_4f:cf:d1 (48:02:2a:4f:cf:d1)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 192.168.1.27 (192.168.1.27), Dst: 192.168.1.20 (192.168.1.20)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 200
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 255
Protocol: UDP (17)
Header checksum: 0xf7a4 [correct]
Source: 192.168.1.27 (192.168.1.27)
Destination: 192.168.1.20 (192.168.1.20)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
User Datagram Protocol, Src Port: mdns (5353), Dst Port: 54254 (54254)
Source port: mdns (5353)
Destination port: 54254 (54254)
asked 08 Feb ‘13, 14:49
BHill
11●2●2●4
accept rate: 0%
edited 08 Feb ‘13, 16:39
SYN-bit ♦♦
17.1k●9●57●245
Not really a Wireshark question. You will probably get better help on a site aimed at Winsock programming, e.g. Stack Overflow.