Guy Harris

> It is right. No, it's *wrong* - and *deliberately* so! I wrote it to demonstrate that your suggested sequence of pcap calls Will. Not. Work., by trying that sequence....

1 is an undocumented, deprecated, and supported-only-in-WinPcap-not-in-Npcap mode. 0, as it uses the performance counter of the CPU on which it's running, is not guaranteed to be synchronized with the...

> When this time is reported back through the timeval struct in the pcap_pkthdr struct of pcap_next_ex(), is it still broken out into seconds and microseconds? Yes. Any behavior other...

Would it also be reasonable to have the "no administrator access required" device set the device mode to `MODE_STAT`, and reject attempts to change to `MODE_CAPT` with some form of...

In > New in macOS Big Sur 11.0.1, the system ships with a built-in dynamic linker cache of all system-provided libraries. As part of this change, copies of dynamic libraries...

> submitting any needed changes upstream for hopeful incorporation Hopefully few if any will be required, given [the AppVeyor builds](https://ci.appveyor.com/project/guyharris/tcpdump), but I need to add builds with the Npcap SDK...

> > submitting any needed changes upstream for hopeful incorporation > > Hopefully few if any will be required, given [the AppVeyor builds](https://ci.appveyor.com/project/guyharris/tcpdump), but I need to add builds with...

> > submitting any needed changes upstream for hopeful incorporation > > Hopefully few if any will be required [Your tcpdump repository](https://github.com/nmap/tcpdump) says "This branch is 406 commits behind the-tcpdump-group:master.",...

This sort of functionality is supported by zero of the UN\*X packet capture mechanisms used by libpcap; instead, there are other platform-dependent mechanisms that allow inserting user-mode code into the...

> If npcap is going to support packet injection I use "packet injection" to mean "transmitting raw packets onto a network, bypassing all of the networking stack other than the...