WinPcap - Home
For many years, WinPcap has been recognized as the industry-standard tool for link-layer network access in Windows environments, allowing applications to capture and transmit network packets bypassing the protocol stack, and including kernel-level packet filtering, a network statistics engine and support for remote packet capture.. WinPcap consists of a driver that …
Exported functions - WinPcap
Create a pcap_t structure without starting a capture. pcap_open_dead() is used for creating a pcap_t structure to use when calling the other functions in libpcap. It is typically used when just using libpcap for compiling BPF code. See also:
WinPcap · Documentation
Manuals. The WinPcap manual and tutorial: inside this manual you will find the documentation of the WinPcap API, a tutorial that will explain how to use the WinPcap functions with several samples, the instructions to compile WinPcap and the applications that use it, a complete description of the internals of WinPcap with links to the source code.
Capturing the packets without the callback - WinPcap
The callback-based capture mechanism of pcap_loop() is elegant and it could be a good choice in some situations. However, handling a callback is sometimes not practical -- it often makes the program more complex especially in situations with multithreaded applications or C++ classes.
Using WinPcap in your programs
Pcap_filter can be used to dump network data according to a particular filter, but also to extract a set of packets from a previously saved file. The format of both input and output files is the format used by libpcap, i.e. same of WinDump, tcpdump and many other network tools.
WinPcap
Flags defined in the pcap_open() function. Sampling methods defined in the pcap_setsampling() function. Authentication methods supported by the RPCAP protocol
WinPcap tutorial: a step by step guide to using WinPcap
This section shows how to use the features of the WinPcap API. It is organized as a tutorial, subdivided into a set of lessons that will introduce the reader, in a step-by-step fashion, to program development using WinPcap, from the basic functions (obtaining the adapter list, starting a capture, etc.) to the most advanced ones (handling send queues and gathering statistics …
WinPcap Documentation
Introduction. This Manual describes the programming interface and the source code of WinPcap. It provides detailed descriptions of the functions and structures exported to programmers, along with complete documentation of the WinPcap internals.
[Winpcap-users] PCAP_OPENFLAG_NOCAPTURE_LOCAL ignored …
After digging through the documentation I came across two >> possible solutions: >> >> PCAP_SETDIRECTION(device, PCAP_D_IN) - a directional filter to the >> capture. Unfortunately this returns -1 as it does not seem to be supported >> on Windows.
WinPcap · Frequently Asked Questions
2009年10月19日 · If I try to compile my application using the new pcap APIs provided in WinPcap 3.1beta, the compiler fails with "warning C4013: 'pcap_???' undefined" or "error C2065: 'PCAP_OPENFLAG_????' : undeclared identifier". What's the problem?