A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what driver and library are required to allow the NIC to work in promiscuous mode?
Wireshark on Windows requires WinPcap to operate. WinPcap is a packet capture library that allows network interfaces to operate in promiscuous mode, which is essential for sniffing traffic.
From CEH v13 Courseware:
Module 8: Sniffing → Sniffing Tools → WinPcap for Windows
[Reference:Wireshark Documentation – “On Windows, WinPcap is required to capture live network traffic.”, Note: WinPcap has been succeeded by Npcap in modern versions., ==================================================================, ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit