Npcap Async Sniffer

martinmistere 0
Viewed 54

I'm using scapy to make ansyncronous sniffer throught an usb-ethernet adapter.

from scapy.all import *
t = AsyncSniffer(iface="ASIX AX88772B USB2.0 to Fast Ethernet Adapter",filter="ether proto 0x5337")
t.start()
print("hey")
time.sleep(10) 
packets= t.stop()
print (packets.summary())

doing so I'm getting the following warning message:

WARNING: WinPcap is now deprecated (not maintained). Please use Npcap instead

I've tried to install Npcap but honestly I'ven't understood how to do the same async acquisition using Npcap instead.

npcap scapy python
1 Answers

Npcap, like WinPcap, provide 1) the libpcap library and 2) a driver, and a library that communicates with the driver, for libpcap to use in order to perform traffic capture and packet injection.

The standard WinPcap and Npcap API is the libpcap API, so it's not as if a program using that API would need to be different for WinPcap and Npcap.

So the same Scary code should work regardless of whether you have WinPcap or Npcap installed.

As for Npcap on Windows Embedded Standard 7, I've filed Npcap issue #637, asking whether Npcap is supported on Windows Embedded Standard 7, given that it's supported on Windows 7.

If the Npcap developers indicate that it's not supported, you're out of luck, and will have to use WinPcap and live with the warning message.

If they indicate that it is supported, then:

  • if you weren't able to install it, please add detailed information on that problem to that issue, so that the Npcap developers know the details of the problem and can attempt to fix it;
  • if you were able to install it, but it doesn't work, please add detailed information on that problem to that issue, so that the Npcap developers know the details of the problem and can attempt to fix it;
  • if you didn't try to install it, try doing so, and then, if it can't be installed or doesn't work after you install it, add detailed information on that problem to that issue, as per the above.

UPDATE:

The Npcap developers indicate that it should, in fact, work on Windows Embedded Standard 7. I.e., they indicate that the OS on your PC should be compatible with Npcap.

user161397390
Related