Stack Overflow
Stack Overflow

Questions tagged [npcap]

Npcap is the packet sniffing/transmitting library for Windows produced by the Nmap project. It is based on the discontinued WinPcap library, but with improved speed, portability, security, and efficiency. It is the de facto standard link-layer network access in Windows environments.

Npcap is the packet sniffing/transmitting library for Windows produced by the Nmap project. It is based on the discontinued WinPcap library, but with improved speed, portability, security, and efficiency. It is the de facto standard for link-layer network access in Windows environments.

Project page

42 questions
0
votes
1 answer

Include WinPcap in a Python binary

I made a Python 3 program that uses Scapy, then I used pyinstaller to generate a binary and it works fine, but there’s always the need to install WinPcap separately to be able to use the binary. Is there a way to include WinPcap/npcap to the binary,…
No name
  • 323
  • 4
  • 11
0
votes
0 answers

Wireshark invoked from dedicated account with "runas" command sees no network interfaces on Windows 7 64-bits

For security reasons I was using Wireshark (it was v2.4.x) as following: 1) Run WinPcap manually: from admin console it is command: net start npf 2) Run Wireshark GUI app from dedicated restricted account. It's a normal user account, not an admin…
Akon
  • 335
  • 1
  • 11
0
votes
1 answer

filter command in scapy is not working, I am running in windows

I wrote the below code in scapy for filtering UDP frames. But it was capturing all the frames just not only UDP. sniff(filter = "UDP", timeout=5) ERROR: Could not compile filter expression UDP the output is: - Sniffed: TCP:41 UDP:32 ICMP:0…
Kishore
  • 1
  • 1
0
votes
2 answers

How to make Wireshark ignore "bytes on wire" and use "bytes captured"

I use Npcap's NULL/loopback capture with Wireshark v2.4.2 and I get complete nonsense stats because for some reason loopback "captures" way too much "on the wire": As you can see, actual sent packet was 1476 bytes, but Wireshark "captured" 2948…
Pavel P
  • 15,789
  • 11
  • 79
  • 128
0
votes
1 answer

How to monitor the windows loopback adapter using sharppcap and npcap?

I have installed the npcap driver, because I want to monitor the windows loopback adapter. However the loopback adapter is not in the SharpPcap CaptureDeviceList. I see the loopback adapter in Wireshark and Wireshark is able to monitor the loopback…
M. Jellinek
  • 1
  • 1
0
votes
1 answer

Compiling VC++ program with Npcap in Visual Studio 2015

I am compiling the following program in Visual Studio 2015 Community Edition. #include "stdafx.h" #include #include #include int main(int argc, char **argv) { pcap_if_t *alldevsp, *device; char errbuf[100]; …
baba.kabira
  • 3,111
  • 2
  • 26
  • 37
0
votes
1 answer

Get local IP address of ethernet interface in C#

Is there a reliable way to get the IPv4 address of the first local Ethernet interface in C#? foreach (NetworkInterface nic in NetworkInterface.GetAllNetworkInterfaces()) { if (nic.NetworkInterfaceType == NetworkInterfaceType.Ethernet) …
Adrian S
  • 514
  • 7
  • 16
0
votes
1 answer

pcap_sendpacket will send two identical packets once

I'm trying to send some self-packed Ethernet packets via the Winpcap API pcap_sendpacket(), but I got two identical packets after invoking the API once. The two packets can be captured on Wireshark for debugging purpose, with identical data and…
Alex Bu
  • 1
  • 2
0
votes
0 answers

Renaming Network Connection programmatically fails

I have written some C++ code to automatically rename the Network Connection in ncpa.cpl. It works fine on Win7 and Win8 but fails in Win10. The function I used is INetConnection::Rename, its return value is 0x80071a90, which…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59
0
votes
0 answers

How to redistribute a software that contains 32 bit DLLs and 64 bit DLLs at the same time?

I am working on NPcap, an open-source Windows packet capturing software originated from famous WinPcap and enhanced with more functionalities. WinPcap's core files are wpcap.dll, packet.dll (in System32 and SysWOW64) and the driver named npf.sys.…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59
-1
votes
1 answer

Npcap 1.31 Setup "Failed to create the npcap service" error

When I try to install Wireshark latest stable version (https://www.wireshark.org/#download) with all optional installs, I am getting "Failed to create the npcap service: 0x00000000. Please try installing Npcap again, or use the latest official Npcap…
Alex Chalyy
  • 1
  • 1
  • 5
-1
votes
1 answer

Cap.findDevice return all time undefined

I try to work on packet with cap but is not work. I have try the default code : const Cap = __cap.Cap const decoders = __cap.decoders const PROTOCOL = decoders.PROTOCOL var c = new Cap(); var device = Cap.findDevice('192.168.0.10'); var filter =…
Albanninou
  • 409
  • 2
  • 11
1 2
3