Revision history [back]

Yes, that is possible. The paper An Architecture for High Performance Network Analysis goes into details, but the TL;DR is that this is an NDIS5 driver, while an NDIS6 driver is a more modern and appropriate capture driver. That is where Npcap steps in, a newly engineered NDIS6 replacement for WinPcap.

Yes, that is possible. The paper An Architecture for High Performance Network Analysis goes into details, but the TL;DR is that this is an NDIS5 driver, while an NDIS6 driver is a more modern and appropriate capture driver. That is where Npcap steps in, a newly engineered NDIS6 replacement for WinPcap.