Are there any alternatives to PCAP DLL for capturing packets, that are not drivers?
Asked
Active
Viewed 2,178 times
2 Answers
2
I don't think so, the windows API as it stands doesn't expose that kind of information. The winPCAP driver is necessary to get into the kernel. Even the more modern network analysis software like wireshark still requires the driver (on windows, at least).
skaffman
- 398,947
- 96
- 818
- 769
-
Can you open a raw socket in the windows API? – jdizzle Mar 08 '10 at 04:16
0
Far away from the original post, you now have NPCap which is compatible NDIS 6 https://nmap.org/npcap/
This information could help a lot of network experts. NPCap is compatible with WireShark.
David ROUMANET
- 146
- 1
- 8