3 ms·
Things like wireshark binds to a raw socket rather than using the Windows API
by MadsRC 4y ago
Things like wireshark binds to a raw socket rather than using the Windows API
- Someone1234 4y agoThe sockets API is a Windows API, and Wireshark does not use it. Instead it uses Npcap, a custom kernel driver. A raw socket allows creation/consumption of bespoke packet types (i.e. not Tcp/Udp). In this case ICMP.