Possibly I've only just noticed this because I've recently reconfigured ZA after becoming somewhat more security conscious.įrom the ubiquitous Google searches I've done, it appears that c:\program files\WinPcap does have legitimate uses, from what I can see - for monitoring remote network traffic?
I had hoped to figure this out without uninstalling and re-installing WinPcap and URLSnooper, but if you don't know any other way, I'll try to do that as soon as I get a chance and post back with the results.Hi, I've recently been getting Zone Alarm Pro prompts to allow rpcapd.exe to act as a server. So like I said before, I haven't been able to find anything that seems to be the driver. The WinPcap installation log indicates the WinPcap installer checked for and found npptools.dll, netnm.inf, and nmnt.sys, so I thought maybe nmnt.sys (a Microsoft Netmon NT Driver) might be the system driver you meant, but according to Autoruns and Process Explorer, it isn't running when URL Snooper is either. I'm not a programmer, so I'm stretching my personal KB here, but what is the (likely) name of the system driver you referred to that wpcap.dll interfaces with? (I'm assuming you know, as the programmer.) I guess it's not the npf.sys by CACE Technologies I mentioned, since that apparently isn't loaded and running when URL Snooper is. Yes, I wouldn't have seen the WinPcap installer option either, except this was a fresh URL Snooper install on a fresh Windows install on an old machine, so it didn't already have WinPcap on it. Sorry to be so long getting back to you.been jammed up with other matters. So what is the WinPcap driver, how can I tell if it is loading at bootup, and how would I change it (i.e., other than maybe running the installer again, or uninstalling and re-installing)? Process Explorer also lists \Device\NPF_ under URLSnooper.exe while URL Snooper is running, but now I'm getting in way over my head and don't know what, if anything, to do with that ? I found npf.sys by CACE Technologies (which I think is the driver ?) listed in Sysinternals' Autoruns, but according to the Autoruns Right-click context menu's Process Explorer option, npf.sys is not currently running, even though I currently have URL Snooper running. I don't see anything in Task Manager or Sysinternals' Process Explorer except WPCAP.DLL listed under URLSnooper.exe in Process Explorer while URL Snooper is running.but that's not the driver, is it? I think I left it checked, thinking there would probably be an option to change it later, but now I can't find one, and I'm not sure how to tell if the driver is loaded or not. But now I can't remember for sure if I left it checked or unchecked it. Thanks for your reply, but I went ahead and installed, and now I'm at a loss on how to check this out further.įYI, I've attached an image of the WinPcap installer option I mentioned in my OP.
0 kommentar(er)
