Npcap: A Modern Packet Capture Library for Windows
Packet capture library for Windows 🔗
Npcap is a packet capture and sending library for Windows developed by the Nmap Project, designed to capture raw network traffic across various platforms using the Pcap API. It supports all current Windows versions and is compatible with both 32-bit and 64-bit architectures, including ARM. Npcap allows for advanced features like loopback packet capture, raw wireless capture, and enhanced security measures. The library has been significantly improved since its inception in 2013, making it more efficient and secure than its predecessor, WinPcap. Npcap is available as a free edition for limited use or a commercial version for enterprises, which includes redistribution rights and additional features.
- Supports all current versions of Windows and architectures (x86, x64, ARM).
- Offers loopback packet capture and raw 802.11 wireless capture.
- Enhanced security features restrict access to administrators.
- Free edition allows use on up to five systems; OEM version available for commercial use.
- Documentation and support available through a user guide and issue tracker.
What is Npcap used for?
Npcap is used for capturing and sending raw network traffic on Windows systems, facilitating packet analysis with tools like Nmap and Wireshark.
How does Npcap differ from WinPcap?
Npcap is a modern replacement for WinPcap, offering improved performance, security, and support for newer Windows features, while maintaining compatibility for software designed for WinPcap.
Can Npcap be used on multiple systems?
The free version of Npcap can be used on up to five systems, but there are exceptions for unlimited use with specific applications like Nmap and Wireshark. A commercial version allows for broader deployment.