This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 4%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
Hello,
I am trying to use the PktmonApi.dll as described here. The information box states that there is no header and instead you load the DLL at runtime and pull out the function addresses using GetProcAddress. On the reference page it lists a bunch of functions that are not actually present in the DLL. It is impossible to get their addresses, and looking at the DLL using a tool like Dependency Walker shows that the functions in the DLL are completely different.
The documentation does not mention these functions anywhere. It seems like they correspond to PktMon's CLI commands, but I am fully unable to use them since I don't know their signatures or what structures they expect. The docs are just completely wrong.
Can anyone provide actual documentation for this API? Or even better a header file?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 86%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDL%3C/text%3E%3C/svg%3E)
I can confirm your findings on my Windows 10 machine. If you don't get any useful comments here, I'd send feedback on the documentation.
I note that the document you referenced does give "Windows Server WS2022-6b update" as the minimum supported version, so does the DLL on that OS have the defined APIs or the same as you showed?
For what its worth, the documentation at Packet Monitor (Pktmon) does not show any supported Windows client version and a minimum supported server version of Windows Server WS2022-6b update.
I too noticed the missing minimum version. But the file exists on client windows, and I find it somewhat hard to believe that the server's DLL is supposed to be different, that doesn't make much sense. The pktmon driver definitely exists on windows, and that DLL is (from what I've read online) merely a wrapper around some ioctl's to the driver
On my Win 10 22H2 only a 64-bit version of the DLL was present.
Maybe someone with Win11 would see different exports?
Oh I should have mentioned I tested this on Windows 11
Just inspected the PktmonApi.dll on a Windows Server and the file contents are wrong here too
Wrong in the same way we've seen here for Win10/11?
And then there's the other usual possibility...the documentation is the stuff that's wrong. Not that it's inconceivable that both the documentation and the distributed DLL are broken.
OK, if it's the same on a server installation (of a version >= to that documented), submit feedback on the documentation. If you have some means of paid MS support, that would be another avenue - though I'd hope that since there's clearly something amiss here, you wouldn't get charged.
Hello All,
The "current" pktmonapi.dll (the one that we all seem to have) is not documented (as far as I know) - it only appears to be used by pktmon.exe.
The documentation looks very much like it is describing new (and useful) functionality - hopefully coming soon. There is obviously no harm in submitting feedback but "patience" alone will probably resolve the question.
Gary
I talked about this to a couple people involved with maintaining SDK documentation, and the answer is that the documentation already documents new SDK features that have not been deployed yet.
Thank you for your sharing, and I've posted this issue through internal channels. I'll let you know if there is any update