Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Newbie question about capture point

From: "Gajan Nadarajan" <gajannada@xxxxxxxxx>
Date: Thu, 28 Jun 2007 11:25:43 -0700
Hello,

I am new to wireshark and was wonder where exactly does wireshark capture eth packets or frames on the windows stack( or somwhere on NDIS)?

Would it be before it reaches the driver?

Thank you.