From 942587012faa233649b6ffce9229a1f9500b1167 Mon Sep 17 00:00:00 2001 From: Fyodor Date: Mon, 5 Jun 2017 19:30:34 -0700 Subject: [PATCH] Regenerate npcap-guide-wrapper HTML from the XML using new Makefile --- docs/npcap-guide-wrapper.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/npcap-guide-wrapper.html b/docs/npcap-guide-wrapper.html index a7f482b3..bb826982 100644 --- a/docs/npcap-guide-wrapper.html +++ b/docs/npcap-guide-wrapper.html @@ -1,5 +1,5 @@ -Npcap Users' Guide

Npcap Users' Guide

Table of Contents

Npcap: Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF
Features
Architecture
How to detect what version Npcap/WinPcap you are using?
Npcap version
Install-time detection
Run-time detection
For software that want to use Npcap first when Npcap and WinPcap coexist
DLL loading
Service name
For software that use Npcap loopback feature
For software that use Npcap raw 802.11 feature
Steps
Tips
Terminology
WlanHelper
How to use Wireshark to capture raw 802.11 traffic in “Monitor Mode”
Get the code
Build
Packaging
Generating debug symbols (optional)
Redistribution
Installer options
Uninstaller options
Disabled and enforced options for GUI Mode
How to change options for GUI Mode
How to change options for Silent Mode
Downloads
Development
SDK
Documentation
Examples
Q & A
License
Bug report
Diagnostic report
General installation log
Driver installation log
Dynamic link library (DLL) log
Driver log
Blue screen of death (BSoD) dump
Contact

Npcap: Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF

+Npcap Users' Guide

Npcap Users' Guide

Table of Contents

Npcap: Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF
Features
Architecture
How to detect what version Npcap/WinPcap you are using?
Npcap version
Install-time detection
Run-time detection
For software that want to use Npcap first when Npcap and WinPcap coexist
DLL loading
Service name
For software that use Npcap loopback feature
For software that use Npcap raw 802.11 feature
Steps
Tips
Terminology
WlanHelper
How to use Wireshark to capture raw 802.11 traffic in “Monitor Mode”
Get the code
Build
Packaging
Generating debug symbols (optional)
Redistribution
Installer options
Uninstaller options
Disabled and enforced options for GUI Mode
How to change options for GUI Mode
How to change options for Silent Mode
Downloads
Development
SDK
Documentation
Examples
Q & A
License
Bug report
Diagnostic report
General installation log
Driver installation log
Dynamic link library (DLL) log
Driver log
Blue screen of death (BSoD) dump
Contact

Npcap: Nmap Project's packet sniffing library for Windows, based on WinPcap/Libpcap improved with NDIS 6 and LWF

Npcap is an update of WinPcap to NDIS 6 Light-Weight Filter (LWF) technique. It supports Windows Vista, 7, 8 and 10. It is sponsored @@ -75,7 +75,7 @@ http://www.radiotap.org/

Architecture

Npcap tries to keep the original WinPcap architecture as much as possible. As the table shows, you will find it very similar with WinPcap. -

Table 1. Npcap Architecture

BinarySourceDescription
wpcap.dllwpcapthe libpcap API, added "loopback support" to original WinPcap
Packet.dllpacketWin7\Dllthe Packet API for Windows, added "Admin-only Mode" to original WinPcap
npf.sys (or npcap.sys)packetWin7\npfthe driver, ported from NDIS 5 to NDIS 6, we support two names: npf or npcap, based on whether Npcap is installed in “WinPcap Compatible Mode”
NPFInstall.exepacketWin7\NPFInstalla LWF & WFP driver installation tool we added to Npcap
NpcapHelper.exepacketWin7\Helperthe helper program for “Admin-only Mode”, will run under Administrator rights
WlanHelper.exepacketWin7\WlanHelpera tool is used to set/get the operation mode (like “Monitor Mode”) for a wireless adapter, will run under Administrator rights

How to detect what version Npcap/WinPcap you are using?

+

Table 1. Npcap Architecture

BinarySourceDescription
wpcap.dllwpcapthe libpcap API, added "loopback support" to original WinPcap
Packet.dllpacketWin7\Dllthe Packet API for Windows, added "Admin-only Mode" to original WinPcap
npf.sys (or npcap.sys)packetWin7\npfthe driver, ported from NDIS 5 to NDIS 6, we support two names: npf or npcap, based on whether Npcap is installed in “WinPcap Compatible Mode”
NPFInstall.exepacketWin7\NPFInstalla LWF & WFP driver installation tool we added to Npcap
NpcapHelper.exepacketWin7\Helperthe helper program for “Admin-only Mode”, will run under Administrator rights
WlanHelper.exepacketWin7\WlanHelpera tool is used to set/get the operation mode (like “Monitor Mode”) for a wireless adapter, will run under Administrator rights

How to detect what version Npcap/WinPcap you are using?

Sometimes, our user software needs to detect the existence of Npcap/WinPcap at install-time or run-time. Although Npcap's GUI installer has the ability to handle this, you may want to handle it by yourself in some conditions, like you run Npcap installer in silent-mode. The run-time detection is even more useful. Your software probably has some functions that rely on Npcap's particular features (like the loopback interface). You need to know if you are running on top of Npcap or the legacy WinPcap to control whether to switch your functions on. Fortunately, Npcap provides you some methods to detect Npcap/WinPcap at install-time and run-time.