tags:

views:

119

answers:

1

Are there any alternatives to PCAP DLL for capturing packets, that are not drivers?

+1  A: 

I don't think so, the windows API as it stands doesn't expose that kind of information. The winPCAP driver is necessary to get into the kernel. Even the more modern network analysis software like wireshark still requires the driver (on windows, at least).

skaffman
Can you open a raw socket in the windows API?
jdizzle