Antivirus NDIS filter driver

Firewall

asked 2019-10-26 10:24:12 +0000

azlan
1 ●1

My pc has been installed with trend micro officescan antivirus with firewall protection component turn on. In my pc i notice there is Trend micro NDIS 6.0 filter driver in my network card properties. As i understand, It is the driver for the client based firewall.It monitors all packets coming in and out on nic card for potential malware/viruses. I just want to know if wireshark packet capture happen before or after this internal firewall?

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2019-10-26 11:17:06 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●973 ●227 https://www.wireshark.org

The npcap diagnostic report (DiagReport.ps1) lists the LWF drivers but it's not clear if they are ordered or if the order is top to bottom or vice-versa.

This is probably a question for the npcap folks over at nmap.

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2019-10-26 10:24:12 +0000

Seen: 1,002 times

Last updated: Oct 26 '19

Antivirus NDIS filter driver edit

1 Answer