[Winpcap-users] How to find out the current locallyinstalled version of WinPCap?

[Gianluca Varenni]

Either call PacketGetVersion/PacketGetDriverVersion or check for the version 
of packet.dll and npf.sys.

Please note that

- these two APIs usually return the same version because we *usually* ship 
driver and packet.dll with the same exact version. I've seen cases of 
screwed up installations where the two versions were not matching.
- due to a bug in packet.dll, at the moment PacketGetDriverVersion will 
report an empty string when called from a 32bit process on a 64bit operating 
system.

You can also use 
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinPcapInst for 
recent versions of WinPcap.

Have a nice day
GV

----- Original Message ----- 
From: "Fish" <fish at infidels.org>
To: <winpcap-users at winpcap.org>
Sent: Wednesday, February 25, 2009 11:20 PM
Subject: Re: [Winpcap-users] How to find out the current locallyinstalled 
version of WinPCap?


>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Ben Stover wrote:
>
>> I somehow guess that WinPCap is already installed on a certain
>> local computer (under WinXP+SP3).
>>
>> How can I find out if WinPCap is installed and if yes which
>> version?
>>
>> Is WinPCap implemented as a DLL or as a SYS driver?
>
>
> While Gianluca would of course be the one to give you THE
> authoritative answer, allow me to try since the question is simple
> enough and I believe I know the proper answer.
>
>
> If WinPCap is installed then the following registry key should exist:
>
>
> HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinPcapInst
>
>
> WinPcap consists of both a device driver ("npf.sys") as well as
> several DLLs, one of which is called "packet.dll".
>
> To determine which version of WinPCap is installed, simply call
> either of the packet.dll's "PacketGetVersion" and/or
> "PacketGetDriverVersion" functions. They're both "typedef PCHAR
> GETWINPCAPVERSIONFUNC()" functions.
>
> They're both currently coded to return the same value: the
> packet.dll's "PacketLibraryVersion" string constant (which is also
> exported in addition to the aforementioned "GETWINPCAPVERSIONFUNC"
> functions.
>
> - -- 
> "Fish" (David B. Trout) - fish at softdevlabs.com
> Fight Spam! Join CAUCE! <http://www.cauce.org/>
> 7 reasons why HTML email is a bad thing
> http://www.georgedillon.com/web/html_email_is_evil.shtml
> PGP key fingerprints:
> RSA: 6B37 7110 7201 9917 9B0D 99E3 55DB 5D58 FADE 4A52
> DH/DSS: 9F9B BAB0 BA7F C458 1A89 FE26 48F5 D7F4 C4EE 3E2A
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 8.1
>
> iQA/AwUBSaZCx0j11/TE7j4qEQK/xgCcDMBYq+4iUINvM+y3K+D0EIHr1o0AoLnI
> IgtbZ6mCPCSCctwaioAlwCjP
> =oYhU
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users