"Blibbet" <blibbet at gmail.com> wrote: > 2) NMap's WinPcap. > > I think they have a fork of WinPcap that's getting updates, unlike the > main one. No, they use a fork of *libpcap* which is way behind the officilal libpcap at tcpdump.org. --gv