Re: Npcap 0.01 call for test about Windows loopback traffic capture feature

[Tyson Key <tyson.key () gmail com>]

Hi Yang,

Thank you for looking into implementing this. Sadly, I tried your package
on my Win8.1 x86-64 machine, and found that not only did the new NPF
service not start after uninstalling "real" WinPCap (running the
installation tool manually, with the -il, and -i options didn't seem to do
anything, until rebooting), and then your new NPCap in "compatibility
mode", I had problems connecting to my WLAN, after rebooting (and I also
received a BSOD, at one stage whilst trying to capture on multiple
interfaces).

Unfortunately, I don't know if I can reproduce these issues, or provide any
logging information, this time - but if I get chance, I'll have another
look.

Take care,

Tyson.

2015-07-11 10:15 GMT+01:00 Yang Luo <hsluoyb () gmail com>:

> Hi list,
>
> In order not to diverge with WinPcap interfaces, I have made a "WinPcap
> Mode" for Npcap, it uses the same system32 directory to put DLLs and has
> the same "npf" service and driver name. So it can be directly used in
> Wireshark without any patch.
>
> Another news is that I have finished Windows loopback packet capture
> feature in Npcap, Npcap will install an adapter named "Npcap Loopback
> Adapter". And I can see the loopback traffic using Wireshark now (See the
> attached pic). It seems to still have problems, like the "(no response
> found!)" in the ICMPv6 packets (ping ::1) in the pic. I don't know why
> Wireshark shows like this, perhaps you guys can provide me a clue.
>
> The latest Npcap installer is:
> https://svn.nmap.org/nmap-exp/yang/NPcap-LWF/npcap-nmap-0.01.exe
>
> I have tested this version Npcap under Wireshark 1.12.6 x64, in Windows
> 8.1 x64 and Windows Server 2016 TP2.
>
> Notice: You need to try it under Win7 and later, and no need to change the
> installation options, just click the "Next"s. Npcap installed in "WinPcap
> Mode" is exclusive with WinPcap, so you must uninstall WinPcap first
> (installer will prompt you this).
>
> The README is:
> https://github.com/nmap/npcap
>
> The implementation internal about loopback traffic feature is:
> http://seclists.org/nmap-dev/2015/q3/35
>
>
> Cheers,
> Yang
>
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
> Archives:    https://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              mailto:wireshark-dev-request () wireshark org
> ?subject=unsubscribe



-- 
                                          Fight Internet Censorship!
http://www.eff.org
http://vmlemon.wordpress.com | Twitter/FriendFeed/Skype: vmlemon |
00447934365844

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe