Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Does Wireshark on Windows rely on Npcap and Winpap for all remote pcap functionality?

Just wanted some confirmation. I was discussing some aspects of Npcap in this thread https://github.com/dotpcap/sharppcap/issues/491#issuecomment-2016152336

and the author mentioned

Wireshark have its own rpcap imlimentation it does not use libpcap or npcap for remote capture.

is that statement true or a mistaken assumption?

If true, I'd be curious why rpcap functionality for Wireshark isn't dependent on npcap or libpcap on Windows but does on other OS platforms (why we don't see Wireshark support for rpcap on those platforms without custom compiling with libpcap built with remote capture support)