84,488,480 programs installed

Should I remove WinPcap?

What percent of users and experts removed it?
3% remove it97% keep it
Overall Sentiment
What do people think about it?
(click star to rate)
How common is it?
Global Rank #1,278
United States Rank #2,479
Reach 0.5385%
Lifespan of installation (until removal)
< 17.39 days
513.13 days >
Average installed length: 269.61 days


VersionDistribution 100.00%

WinPcap 4.1.1

What is WinPcap?

WinPcap is the Windows version of the libpcap library; it includes a driver to support capturing packets. WinPcap consists implementations of a lower-level library for the listed operating systems, to communicate with those drivers; a port of libpcap that uses the API offered by the low-level library implementations. It uses NDIS to read packets directly from a network adapter.

About  (from CACE Technologies)

WinPcap is the industry-standard tool for link-layer network access in Windows environments: it allows applications to capture and transmit network packets bypassing the protocol stack, and has additional useful features, including kernel-level packet filtering, a network statistics engine and support for remote packet...  Read more


Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The primary executable is named rpcapd.exe. The setup package generally installs about 9 files and is usually about 1.37 MB (1,440,496 bytes).

Program detailsProgram details

URL: www.cacetech.com
Installation folder: C:\Program Files\winpcap
Uninstaller: C:\Program Files\WinPcap\uninstall.exe
Estimated size: 1.37 MB

Program filesFiles installed by WinPcap 4.1.1

Program executable:rpcapd.exe
Remote Packet Capture Daemon
Path:C:\Program Files\winpcap\rpcapd.exe
WinPcap allows applications to capture and transmit network packets and consists of a driver, that extends the operating system to provide low-level network access, and a library that is used to easily access the low-level network layers....
Additional files:
  • daemon_mgm.exe - WinPcap Remote Capture Daemon installer/remover (daemon_mgm)
  • npf_mgm.exe - WinPcap NPF Driver installer/remover (npf_mgm)
  • NetMonInstaller.exe - NetMon Protocol Driver Installer (NetMonInstaller)
  • uninstall.exe - WinPcap 4.1.2 (WinPcap 4.1.2 installer)
  • WinPcapInstall.dll - WinPcap (WinPcap Installer Helper)

Program behaviorsBehaviors exhibited

Scheduled Task
  • Uninstall.exe is scheduled as a task with the class '{0B2D20BC-0344-4EA6-A4D3-1B30F67B5F39}' (runs on registration).
  • rpcapd.exe runs as a service named 'rpcapd' (rpcapd) "Allows to capture traffic on this machine from a remote machine.".
2 Windows Firewall Allowed Programs
  • rpcapd.exe is added as a firewall exception for 'C:\Program Files\WinPcap\rpcapd.exe'.
  • uninstall.exe is added as a firewall exception for 'C:\Program Files\WinPcap\Uninstall.exe'.

Program resource utilizationResource utilization averages

Memory:2.28 MB
21.09 MB average
User CPU:0.00009378%
0.015104% average
CPU cycles/sec:4,985
8,062,084 average
I/O reads/min:8 Bytes
435.61 KB average
I/O writes/min:0 Bytes
105.02 KB average

How do I remove WinPcap?

You can uninstall WinPcap from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program WinPcap 4.1.1, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove WinPcap.

Win 7 (SP1) 61%
Win 7 0%
Windows Service? Yes
(Installs a service)
Uninstall it 3%
Keep it 97%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 68.05%
Windows 10 16.56%
Windows XP 8.76%
Windows Vista 6.60%
Windows Server 2003 0.04%
Which OS releases does it run on?
Windows 7 Home Premium 29.91%
Windows 7 Ultimate 19.91%
Windows 7 Professional 11.36%
Microsoft Windows XP 8.65%
Windows Vista Home Premiu... 5.02%
Windows 7 Home Basic 3.76%

Distribution by countryGeography

25.24% of installs come from the United States
Which countries install it?
  United States 25.24%
  Brazil 16.99%
  Germany 6.64%
  France 5.08%
  United Kingdom 3.88%
  Italy 3.83%
  Canada 2.42%
  Spain 2.36%
  Portugal 2.21%
  Netherlands 1.87%
  Australia 1.71%
  Belgium 1.53%
  Iran 1.34%
  Turkey 1.25%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 23.85%
Dell 20.47%
Acer 19.70%
ASUS 9.44%
Samsung 5.44%
Toshiba 5.32%
Lenovo 2.92%
Intel 2.82%
American Megatrends 1.45%
Sahara 0.81%
Common models
HP Pavilion dv6 Notebook ... 6.80%
HP Pavilion dv7 Notebook ... 5.21%
HP Pavilion g6 Notebook P... 3.67%
Positivo Positivo MO... 3.52%
ASUS All Series 2.38%
Dell Inspiron N5010 2.28%

About CACE Technologies

CACE is the sponsor behind Wireshark and WinPcap, the most widely used Open Source network traffic capture and analysis tools.
Publisher URL: www.cacetech.com


user comment
No one has commented yet. Help others learn more about this software, share your comments.