Prevent Npcap from capturing certain sent frames twice when they're looped back by other software on the machine
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 3.6k
- Forks
- 592
- PR merge metrics
- No merged PRs in 30d
Description
We have a third party tool installed called Performance Guard (PG). This tool has it own version of winpcap imbedded.
They have renamed the driver to pgnpf.sys so that it does not conflict with winpcap driver coming with Wireshark.
PG could in this way live side by side with Wireshark without any conflict. We could uninstall PG and that would live winpcap untouched and Wireshark would still work, or we could uninstall Wireshark and that would leave pgnpf.sys and PG would still work.
Using Wireshark and npcap.sys then Wireshark gets duplicates of all frames sent out of the machine. Received frames are OK.
Removing the pgnpf.sys driver, then it all works fine.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No source file or test is named. Start by reproducing capture behavior with Npcap, Wireshark, and the third-party pgnpf.sys driver present, then compare it after that driver is removed. Done means sent frames are no longer reported twice while received frames remain correctly captured.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c
- Domain
- networking, operating-systems
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100