With regard to FAQ #19 – when are the Registry entries created?
When I install WinPcap (v2.3 & v3.0a) and then inspect the Registry, the entries are not there. Then if I run WinDump for just a short time (5 secs) and then look at the Registry, the entries are there - usually.
I have even ‘exported’ the entire Registry immediately after installing WinPcap and searched for the string “NPF” to see if the entries are cached in some other hive. (They’re not!)
The absence of these entries does NOT affect WinDump or any other software that uses WinPcap.
The problem is that I want to have WinPcap loaded at boot time and so I must change the Registry as described in FAQ #19. And, unfortunately, this is not something that needs to be done once - I work at a University where machines need to be ‘re-imaged’ regularly.
PS: Great software! I originally used the old DLC.SYS packet driver in my software. It took about a day to switch to WinPcap – glad I took the time. The code is a lot simpler and far quicker.
