[Winpcap-users] Risk related to using winPcap in place of WinSock socket

Guy Harris guy at alum.mit.edu
Thu Jul 8 10:56:16 PDT 2010


On Jul 8, 2010, at 7:01 AM, Bilal Shahid wrote:

> Does bypassing OS, and according to my understanding application and transport layers on my side, involve any risks?

Does re-implementing IP and TCP involve any risks?

Yes.  The response from the other forum gives at least some of the risks; there might well be more.

> Is it normally recommended to use winpcap for critical application information transfer or it is generally recommended for packet sniffing etc.

WinPcap, just like libpcap and the mechanisms it uses on UN*X, is primarily intended for packet capture, not re-implementing protocols that the OS provides.


More information about the Winpcap-users mailing list