On two different Win7 PCs we're having a very specific problem where connecting a device which uses a RNDIS driver sometimes disrupts the PC's network adapter connection (we detect this because we then temporarily lose the connection to our Oracle database). We have determined that the problem occurs only when the device gets connected and Windows activates the driver. We never have a connection problem if the device stays connected or stays disconnected.
Someone suggested that we should monitor the routing table or the address resolution protocol (ARP) to see if something abnormal could be observed when the connection problem occurs. But, since the problem occurs randomly, I need a way to automatically detect changes to the routing table and to the results of the ARP. Specifically, I want to be able to compare the results of the route print and arp -a commands in a good and a bad case.
Are there any software that would help me monitor and log those changes? Optimally, I would like to avoid having to write a software that listens to WinAPI events.