Ordinary network applications require basic operating system elements only to access data on the network. Such components are sockets. So the operating system takes care of all the low level details like packet reassembling and protocol handling. WinPcap 4.1.3 sets the Windows standard in direct packet access, creating a separate connection to raw network data for software like traffic loggers/generators, user-level bridges and routers, network and protocol analyzers, network monitors/scanners, network intrusion detection systems or other security tools.
- High performance
- Well documented
WinPcap 4.1.3 provides your OS with dynamic libraries that generate a group of independent system functions. They are used for getting the list of available network adapters and extracting comprehensive info regarding particular adapters, etc. WinPcap 4.1.3 is freeware and is released under the BSD open source license. Developers have complete freedom to modify and use it no matter their applications (free or commercial). You can get the binary and source code right on the website of WinPcap.
WinPcap 4.1.3 implements all of the standard improvements described in the packet capture literature such as kernel-level filtering and buffering, context switch mitigation, partial packet copy. It even integrates some additional ones, like JIT filter compilation and kernel-level statistic processing. These are precisely the reasons that WinPcap 4.1.3 domineers over other close approaches.
This application is very stable and reliable, thanks to the experienced Windows driver developers, who have actually developed it.
WinPcap 4.1.3 comes as a tiny executable file, which can run on every supported OS. You simply load it and the next thing, your OS can capture and send raw network traffic. How easier can it be?
WinPcap 4.1.3 is a cross-platform application. It is supported on Windows NT, Windows 2000, Windows XP and Windows Server 2003, etc. Unfortunately Windows Vista doesn't maintain some features and they are practically disabled.
The main purpose of WinPcap 4.1.3 is to sniff the packets that transit the network wire, unlike Quality of Service schedulers, personal firewall, etc. By design, it cannot restrict or handle the generated traffic of other apps on the same system.