Hi, I am looking into how programs like tcpview manage to know how many bytes are sent and received by an individual process. I notice that the task manager in windows 10 also has this information in the form of Mb/s for individual application.
In my initial search I seen comments like "(x)app must/probably use ETW (event tracing for windows)" but they never explain how.
I'm not fussy whether a solution might be in C/++ or C#.
I'm hoping someone can point me in the right direction.
Thanks for reading.