Hi,
I'm a bit confused about the phrase PPP used here, does it mean to capture on a physical WAN adapter, or capture the decrypted PPTP or L2TP packets (using VPN)? If the option goes to the former, is there a way to emulate such a hardware? because I don't have a WAN adapter, and it's important to have the hardware when adding it to Npcap. If the option goes to the latter, Npcap currently supports capturing on encrypted VPN data. The link in
https://msdn.microsoft.com/en-us/library/windows/desktop/bb404173%28v=vs.85%29.aspx seems to provide a sort of backdoor for Network Monitor as Guy said, but it's NDIS 5 and for protocol drivers, it remains to be confirmed whether it works for a NDIS 6 filter driver.
For the vista, Npcap is manually disabled on that platform in the installer level, but actually this is technically viable because Vista is also NDIS 6. I will reopen the door for Vista on Npcap if possible, and better if you could provide your detailed OS type, x86 or x64, RTM or SP1 or SP2?
Cheers,
Yang
