ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] Newbie question about capture point

From: "Gajan Nadarajan" <gajannada@xxxxxxxxx>
Date: Thu, 28 Jun 2007 13:43:55 -0700
Hello,

I was wondering where exactly does wireshark capture eth packets or frames on the windows stack( or somwhere on NDIS)?

Would it be before it reaches the device driver?

Thank you.