[Winpcap-users] Windows 10 support for WinPcap

Sven Kerschbaum svkers at gmail.com
Thu Feb 4 11:18:15 UTC 2016


Oh, I have to admit that I did not try it on an update to date Windows 10
system... Thanks for the hint that this was only an issue in early Windows
10 versions.

I was also not aware of the Npcap. Thanks for pointing me to this fork! How
does Npcap differ from WinPcap with respect to performance, feature? At
least I am missing the possibility to get notified about media state
changes (connected, disconnected) in WinPcap. Does Npcap offer such a
functionality?

Furthermore: Is WinPcap still under active development? Its last release
was in 2013. Or I am better advised to rely on Npcap?

Thank you!
Best regards,
SK




2016-02-04 11:08 GMT+01:00 Gisle Vanem <gvanem at yahoo.no>:

> Sven Kerschbaum wrote:
>
> > is there already effort for getting WinPcap ready for Windows 10? As
> Pascal Quantin already pointed out WinPcap does not
> > run on Windows 10 due to the fact that the WinPcap driver is not an NDIS
> 6 driver. Please find more information here:
> > http://www.winpcap.org/pipermail/winpcap-users/2015-March/004936.html
>
> Really? All my WinPcap-based programs works fine here.
> From 'sigcheck c:\WINDOWS\sysnative\drivers\npf.sys':
>
>         Verified:       Signed
>         Signing date:   02.49 01.03.2013
>         Publisher:      Riverbed Technology
>         Company:        Riverbed Technology, Inc.
>         Description:    npf.sys (NT5/6 AMD64) Kernel Driver
>         Product:        WinPcap
>         Prod version:   4.1.0.2980
>         File version:   4.1.0.2980
>         MachineType:    64-bit
>
>
> The version and 'Signing date' is in accordance with what's on winpcap.org
> .
> An also:
>
> F:\> windump -Dv
> 1. \Device\NPF_{E069AC87-4219-4F7E-9CA5-DE3FBA031CEF}    Descr: Microsoft
>     Addr 0: 10.0.0.11 (mask 255.255.255.0)
>     MAC-addr: 00:18:4D:00:DE:17, MTU 1514, link-type 802.3 over
> Native802_11, DOWN, 54Mb/s (NDIS)
>
> 2. \Device\NPF_{990D25A5-6071-4C67-AC14-A5380B0FFDEC}    Descr: Microsoft
>     Addr 0: fe80::8089:b86f:1ef6:347e (mask ::)
>     Addr 1: fe80::8089:b86f:1ef6:347e (mask ::)
>     MAC-addr: 00:15:83:12:37:2F, MTU 1514, link-type 802.3 over Bluetooth,
> DOWN, 3Mb/s (NDIS)
>
> 3. \Device\NPF_{7BA27187-146B-4FB6-B4BA-DC5D218FB607}    Descr: Realtek
> Ethernet Controller
>     Addr 0: 10.0.0.10 (mask 255.255.255.0)
>     MAC-addr: E0:3F:49:81:2E:EA, MTU 1514, link-type 802.3, UP, 100Mb/s
> (NDIS)
>
> --------------
>
> I'm on Win 10. Version 1511 (OS-Build 10586.71).
> Windows 10 build 10041 (as mention in that mail) is pretty old.
>
>
>
> --
> --gv
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.winpcap.org/pipermail/winpcap-users/attachments/20160204/f69f9cc0/attachment-0001.html>


More information about the Winpcap-users mailing list