Wireshark-dev: [Wireshark-dev] Newbie question about capture point
From: "Gajan Nadarajan" <[email protected]>
Date: Thu, 28 Jun 2007 13:43:55 -0700
Hello,

I was wondering where exactly does wireshark capture eth packets or frames on the windows stack( or somwhere on NDIS)?

Would it be before it reaches the device driver?

Thank you.