[Winpcap-users] Packet From Application?

[Guy Harris]

On Jul 31, 2009, at 8:05 AM, Gianluca Varenni wrote:

> There is no easy way to know that with the current WinPcap  
> architecture.
> Is the application running on the same machine as WinPcap?

If not, there's no way to know that with any architecture for WinPcap  
or any other capture mechanism, as that information doesn't get sent  
in packets (the machine sending a packet might not even *have*  
identifiable applications running on it).