guyharris
commented
6 months ago Just curious whether the libpcap related functionality that Ncpap uses (or is bundled with) supports SSL/TLS?
Given that the code would require a third-party OpenSSL/LibreSSL library to support that, it's almost certainly not bundled.
Hi,
Just curious whether the libpcap related functionality that Ncpap uses (or is bundled with) supports SSL/TLS? I wasn't sure if this is upstream at libpcap whether it can support it on Windows or not. So filed https://github.com/the-tcpdump-group/libpcap/issues/1299 to confirm.
But in any case, this report here is about being aware of and considering these 2 things:
if the SSL support has any dependency of libpcap back to Npcap, just as how the libpcap build process on Windows requires pointing to Npcap SDK installation in order to build it, should ensure Npcap has whatever libpcap needs to check whether SSL can be enabled/supported or not.
that the (future?) Npcap releases (that include libpcap) build and include libpcap with SSL support, if/when libpcap supports SSL on Windows.
On a related note was testing latest release of Wireshark 4.2.3 that includes Npcap 1.78, and observed these results hitting an rpcapd that had TLS enabled:
https://ask.wireshark.org/question/34101/rpcaps-or-remote-pcap-over-tls-support-in-wireshark-for-windows/