Guy Harris

> At least one issue appears to be that [linux_if_drops()](https://github.com/the-tcpdump-group/libpcap/blob/master/pcap-linux.c#L771-L777) does not report the value of `rx_dropped`, which indicates the number of packets [not forwarded to the upper layers for...

> Error compiling our pcap filter: expression rejects all packets Perhaps your pcap filter cannot possibly match any packets on the interface on which you're capturing. On what type of...

> Nmap pcap "NPCAP" v1.79 and on NordLynx adaptor for Nord VPN. What is the filter expression you're using?

> The nmap in this case is invoked by Metasploit What is the filter that NordLynx is using?

@mcr, what should we do about new link-layer type requests while we're waiting for [draft-ietf-opsawg-pcaplinktype](https://datatracker.ietf.org/doc/html/draft-ietf-opsawg-pcaplinktype) to burst out of its chrysalis as a ~~butterfly~~*RFC*? Once it's an RFC, presumably we'll...

> AFAIR, Guy quite a while ago was going to clarify this with the intent to switch to a more common BSD licence variant, but I do not know how...

What happens if you use Wireshark 4.2.5 and WinPcap 4.1.3?

> looks like that also works to capture traffic with 4.2.5 and winpcap 4.1.3 So an Npcap issue, not a Wireshark issue.

> its the github repo for npcap right? Right, so this is, indeed, the right place to report Npcap issues.

So what will `handle->linktype` be set to in this case? `DLT_EN10MB`?