84,488,480 programs installed

Should I remove WinPcap?

What percent of users and experts removed it?
7% remove it93% keep it
Overall Sentiment
Excellent
What do people think about it?
(click star to rate)
How common is it?
Global Rank #14,312
United States Rank #15,771
Reach 0.0202%
Lifespan of installation (until removal)
< 50.85 days
799.83 days >
Average installed length: 420.25 days

Versions

VersionDistribution
4.1.0.2980 4.02%
4.1.0.2001 7.54%
4.1.0.1753 2.51%
4.1.0.1452 0.25%
4.0.0.1040 0.50%
3.1.0.27 33.42%

WinPcap 3.1

What is WinPcap?

WinPcap is the Windows version of the libpcap library; it includes a driver to support capturing packets. WinPcap consists implementations of a lower-level library for the listed operating systems, to communicate with those drivers; a port of libpcap that uses the API offered by the low-level library implementations. It uses NDIS to read packets directly from a network adapter.

About  (from CACE Technologies)

WinPcap is the industry-standard tool for link-layer network access in Windows environments: it allows applications to capture and transmit network packets bypassing the protocol stack, and has additional useful features, including kernel-level packet filtering, a network statistics engine and support for remote packet...  Read more

Overview

The most common release is 3.1.0.27, with over 63% of all installations currently using this version. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The setup package generally installs about 6 files and is usually about 516.23 KB (528,624 bytes).

Program detailsProgram details

URL: www.cacetech.com
Installation folder: C:\Program Files\WinPcap
Uninstaller: "C:\Program Files\WinPcap\Uninstall.exe" "C:\Program Files\WinPcap\install.log"
Estimated size: 516.23 KB

Program filesFiles installed by WinPcap 3.1

  • daemon_mgm.exe - WinPcap Remote Capture Daemon installer/remover (daemon_mgm)
  • npf_mgm.exe - WinPcap NPF Driver installer/remover (npf_mgm)
  • NetMonInstaller.exe - NetMon Protocol Driver Installer (NetMonInstaller)
  • rpcapd.exe - Remote Packet Capture Daemon (rpcapd)
  • Uninstall.exe - WinPcap 3.1 (WinPcap 3.1 installer)
  • WinPcapInstall.dll - WinPcap (WinPcap Installer Helper)

Program behaviorsBehaviors exhibited

2 Scheduled Tasks
  • Uninstall.exe is scheduled as a task with the class '{0B2D20BC-0344-4EA6-A4D3-1B30F67B5F39}' (runs on registration).
  • rpcapd.exe is scheduled as a task with the class '{6A94A70F-DA5E-4E9D-958C-AEF0E27CCAAA}' (runs on registration).
Service
  • rpcapd.exe runs as a service named 'rpcapd' (rpcapd) "Allows to capture traffic on this machine from a remote machine.".
Windows Firewall Allowed Program
  • rpcapd.exe is added as a firewall exception for 'C:\Program Files\WinPcap\rpcapd.exe'.

Program resource utilizationResource utilization averages

rpcapd.exe
Memory:2.28 MB
21.09 MB average
User CPU:0.00009378%
0.015104% average
CPU cycles/sec:4,985
8,062,084 average
I/O reads/min:8 Bytes
435.61 KB average
I/O writes/min:0 Bytes
105.02 KB average

How do I remove WinPcap?

You can uninstall WinPcap from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program WinPcap 3.1, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove WinPcap.

OS VERSIONS
Win XP 37%
Win Vista 0%
 
HOW IT RUNS
Windows Service? Yes
(Installs a service)
 
USER ACTIONS
Uninstall it 7%
Keep it 93%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows XP 39.20%
Windows 7 38.69%
Windows 10 12.56%
Windows Vista 9.55%
Which OS releases does it run on?
Microsoft Windows XP 39.75%
Windows 7 Home Premium 19.49%
Windows 7 Ultimate 11.65%
Windows Vista Home Premiu... 6.84%
Windows 7 Professional 5.06%
Windows 8.1 Pro 2.78%

Distribution by countryGeography

35.76% of installs come from the United States
Which countries install it?
  United States 35.76%
  Spain 7.95%
  France 6.40%
  Germany 4.64%
  Egypt 3.75%
  Mexico 3.53%
  Canada 3.31%
  Italy 2.87%
  Poland 2.43%
  MA 2.21%
  Indonesia 1.99%
  United Kingdom 1.77%
  Colombia 1.55%
  Taiwan 1.32%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 22.65%
Dell 18.38%
GIGABYTE 14.96%
Acer 12.82%
Toshiba 8.97%
American Megatrends 5.98%
ASUS 5.56%
Lenovo 4.27%
Intel 2.14%
Sahara 2.14%
Samsung 1.28%
MSI 0.85%
Common models
GBT AWRDACPI 3.82%
HP Pavilion dv7 Notebook ... 3.05%
Gigabyte G41M-Combo 2.29%
ASUS All Series 2.29%
HP Pavilion g7 Notebook P... 2.29%
Gigabyte GA-78LMT-USB3 6.... 1.53%

About CACE Technologies

CACE is the sponsor behind Wireshark and WinPcap, the most widely used Open Source network traffic capture and analysis tools.
Publisher URL: www.cacetech.com

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.