[Winpcap-users] Packet From Application?

Guy Harris guy at alum.mit.edu
Fri Jul 31 09:45:00 PDT 2009

On Jul 31, 2009, at 8:05 AM, Gianluca Varenni wrote:

> There is no easy way to know that with the current WinPcap  
> architecture.
> Is the application running on the same machine as WinPcap?

If not, there's no way to know that with any architecture for WinPcap  
or any other capture mechanism, as that information doesn't get sent  
in packets (the machine sending a packet might not even *have*  
identifiable applications running on it).

More information about the Winpcap-users mailing list