Win10Pcap

Win10Pcap 10.2.5002

New WinPcap-based packet capture library for Windows 10,8 and 7. Compatible with NDIs 6.x driver model. Supports IEEE802.1Q VLAN tags.

  • By Daiyuu Nobori, University of Tsukuba, Japan
  • Open Source
  • Updated Oct 8, 2015
Download for Windows

About Win10Pcap

Win10Pcap is a new WinPcap-based Ethernet packet capture library.
Unlike original WinPcap, Win10Pcap is compatible with NDIS 6.x driver model to work stably with Windows 10. Win10Pcap also supports capturing IEEE802.1Q VLAN tags.
Win10Pcap has the binary-compatibility with the original WinPcap DLLs. You can run Wireshark or other WinPcap-compatible applications with Win10Pcap by simply installing Win10Pcap DLLs, instead of original WinPcap.
Win10Pcap is written as a personal project by Daiyuu Nobori, a Ph.D student of Computer Science of University of Tsukuba, Japan. The many parts of Win10Pcap was from WinPcap.

What's new in 10.2.5002

Added the security check code on the read/write/ioctl procedures on the Win10Pcap kernel-mode driver. In the previous version of Win10Pcap, the kernel-mode driver did not check the virtual addresses which are passed from the user-mode. A local user was able to exploit this to read or write data bytes in the kernel-space memory. This had a risk to allow a local user to gain the escalated privilege on the local system. This security check code is to prevent such as illegal access from a local user. For details, please see https://github.com/SoftEtherVPN/Win10Pcap/commits/master.
The problem was reported by Meysam Firozi on October 7, 2015. I greatly appreciate Meysam Firozi's contribution to report this problem.

Full release notes »

Technical details

PublisherDaiyuu Nobori, University of Tsukuba, Japan
AuthorDaiyuu Nobori
Version10.2.5002
Release date2015-10-08
LicenseGPL-2.0
Installer typewix
Architecturex86
Package IDDaiyuuNobori.Win10Pcap

Install Win10Pcap from the command line

Install with Windows Package Manager
winget install --id=DaiyuuNobori.Win10Pcap -e
Update to the latest version
winget upgrade --id=DaiyuuNobori.Win10Pcap -e
Uninstall
winget uninstall --id=DaiyuuNobori.Win10Pcap -e
Silent install with the offline installer
msiexec /i "Win10Pcap-v10.2-5002.msi" /quiet /norestart
Uninstall the MSI package
msiexec /x {B5B58F8A-1984-4F3E-B400-235A6E005002} /quiet

analyzercapturenetworkprotocolsniffertrafficwinpcap

Frequently asked questions

Is Win10Pcap free?

Yes. Win10Pcap is free and open-source software released under the GPL-2.0 license.

What is the latest version of Win10Pcap?

The latest version is 10.2.5002, released on Oct 8, 2015.

Is it safe to download Win10Pcap?

The download button links to the official installer published on win10pcap.org, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with ce1169c7cac4bc9bc45e159cec069f0ab57c42fc3f636456a2e404cc6b91e855.

Which Windows versions does Win10Pcap support?

Win10Pcap runs on Windows and is available for 32-bit (x86) systems.

How do I install Win10Pcap silently?

Run the offline installer with msiexec /i "Win10Pcap-v10.2-5002.msi" /quiet /norestart, or install it with Windows Package Manager: winget install --id=DaiyuuNobori.Win10Pcap -e --silent.

How do I uninstall Win10Pcap?

Open Settings › Apps › Installed apps, find Win10Pcap and select Uninstall. From the command line, run winget uninstall --id=DaiyuuNobori.Win10Pcap -e.