Only Built-in Administrators may access its features via user software (Nmap, Wireshark, etc). The option “ Restrict Npcap driver's access to Administrators only” checked, Use to Administrators for safety purpose. “ Admin-only Mode” Support: Npcap supports restricting its See more detailsĪbout this feature in the section called “For software that uses Npcap raw 802.11 feature”. Tool to manually configure WiFi PHY parameters. Npcap directly supports using Wireshark to capture in “ Monitor Mode”. Your adapter is in “ Managed Mode”, Npcap will only supply Ethernet When your adapter is in “ Monitor Mode”, Npcap will supply allĨ02.11 data + control + management packets with Radiotap headers.

Mode) for wireless adapters option in the installation wizard to enable You need to select the Support raw 802.11 traffic (and monitor Raw 802.11 Packet Capture Support: Npcap is able to seeĨ02.11 frames instead of emulated Ethernet frames on ordinary wirelessĪdapters. Packet injection works as well with pcap_inject(). Wireshark users can choose this adapter to capture all loopback traffic the same way as other Interface named “ NPF_Loopback”, with the description “ Adapter for loopback capture.” Loopback packet capture and injection: Npcap is able to Providing the best solution for compatibility, performance, functionality, and security. To target Linux, Windows, macOS, BSD, Solaris and others. The libpcap API allows cross-platform packet capture applications

Npcap is implemented as a NDIS 6 Lightweight Filter driver, faster and with less overhead Using up-to-date NDIS versions, it allows you to capture traffic without slowing down the network stack.

Gathering Statistics on the network trafficīuilt for modern Windows: Npcap is written for Windows 10, Windows 8.1, Windows 8, and Windows 7.

Sending a single packet with pcap_sendpacket().

Capturing the packets without the callback.

Opening an adapter and capturing the packets.Obtaining advanced information about installed devices.For software that uses Npcap raw 802.11 feature.For software that uses Npcap loopback feature.For software that want to use Npcap first when Npcap and WinPcap coexist.How to detect what version Npcap/WinPcap you are using?.How to use Wireshark to capture raw 802.11 traffic in “ Monitor Mode”.Disabled and enforced options for GUI Mode.

Wireshark monitor mode