[Winpcap-users] loopback and LSP

[Loris Degioanni]

WinPcap is not a filter, it's a protocol driver.
The problem with all the other techniques is that they sit above 
tcpip.sys. This means that you get loopback traffic, because in Windows 
loopback is handled internally by the tcp/ip driver.
But this means also that with them you don't capture packets, but the 
flows processed by tcp/ip.

Loris


Kervin L. Pierre wrote:
> Hello,
> 
> I'm new to WinPCap but I've worked
> with Win32 API/C++ for years now, and
> would like to see loopback support in
> the library.
> 
> I have heard that other libraries use
> WinSock Layed Service Provider API to
> accomplish this.
> 
> http://www.ndis.com/papers/winpktfilter.htm
> http://www.microsoft.com/msj/0599/LayeredService/LayeredService.aspx
> 
> What type of filter is WinPCap?
> Could the LSP approach work?  How much
> effort would be involved?
> 
> Best regards,
> Kervin
> 
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users
>