84,488,480 programs installed

Should I remove WinPcap?

What percent of users and experts removed it?
8% remove it92% keep it
Overall Sentiment
What do people think about it?
(click star to rate)
How common is it?
Global Rank #218
United States Rank #411
Reach 2.5624%
Lifespan of installation (until removal)
< 12.80 days
377.55 days >
Average installed length: 198.37 days


VersionDistribution 100.00%

WinPcap 4.1.2

What is WinPcap?

WinPcap is the Windows version of the libpcap library; it includes a driver to support capturing packets. WinPcap consists implementations of a lower-level library for the listed operating systems, to communicate with those drivers; a port of libpcap that uses the API offered by the low-level library implementations. It uses NDIS to read packets directly from a network adapter.

About  (from CACE Technologies)

WinPcap is the industry-standard tool for link-layer network access in Windows environments: it allows applications to capture and transmit network packets bypassing the protocol stack, and has additional useful features, including kernel-level packet filtering, a network statistics engine and support for remote packet...  Read more


It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The main program executable is rpcapd.exe. The software installer includes 10 files and is usually about 2.4 MB (2,520,223 bytes).

Program detailsProgram details

URL: www.cacetech.com
Installation folder: C:\Program Files\winpcap
Uninstaller: C:\Program Files\WinPcap\uninstall.exe
Estimated size: 2.4 MB

Program filesFiles installed by WinPcap 4.1.2

Program executable:rpcapd.exe
Remote Packet Capture Daemon
Path:C:\Program Files\winpcap\rpcapd.exe
WinPcap allows applications to capture and transmit network packets and consists of a driver, that extends the operating system to provide low-level network access, and a library that is used to easily access the low-level network layers....
Additional files:
  • daemon_mgm.exe - WinPcap Remote Capture Daemon installer/remover (daemon_mgm)
  • npf_mgm.exe - WinPcap NPF Driver installer/remover (npf_mgm)
  • NetMonInstaller.exe - NetMon Protocol Driver Installer (NetMonInstaller)
  • uninstall.exe - WinPcap 4.1.2 (WinPcap 4.1.2 installer)
  • WinPcap_4_1_2.exe
  • WinPcapInstall.dll - WinPcap (WinPcap Installer Helper)

Program behaviorsBehaviors exhibited

2 Scheduled Tasks
  • Uninstall.exe is scheduled as a task with the class '{0B2D20BC-0344-4EA6-A4D3-1B30F67B5F39}' (runs on registration).
  • rpcapd.exe is scheduled as a task with the class '{6A94A70F-DA5E-4E9D-958C-AEF0E27CCAAA}' (runs on registration).
  • rpcapd.exe runs as a service named 'rpcapd' (rpcapd) "Allows to capture traffic on this machine from a remote machine.".
2 Windows Firewall Allowed Programs
  • rpcapd.exe is added as a firewall exception for 'C:\Program Files\WinPcap\rpcapd.exe'.
  • Uninstall.exe is added as a firewall exception for 'C:\Program Files\WinPcap\Uninstall.exe'.

Program resource utilizationResource utilization averages

Memory:2.28 MB
21.09 MB average
User CPU:0.00009378%
0.015104% average
CPU cycles/sec:4,985
8,062,084 average
I/O reads/min:8 Bytes
435.61 KB average
I/O writes/min:0 Bytes
105.02 KB average

How do I remove WinPcap?

You can uninstall WinPcap from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program WinPcap 4.1.2, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove WinPcap.

Win 7 (SP1) 57%
Win Vista (SP1) 0%
Windows Service? Yes
(Installs a service)
Uninstall it 8%
Keep it 92%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 62.55%
Windows 10 27.10%
Windows XP 6.04%
Windows Vista 4.26%
Windows Server 2003 0.04%
Which OS releases does it run on?
Windows 7 Home Premium 28.37%
Windows 7 Ultimate 17.85%
Windows 7 Professional 12.62%
Windows 10 Home 6.34%
Microsoft Windows XP 5.98%
Windows 8.1 5.46%

Distribution by countryGeography

33.28% of installs come from the United States
Which countries install it?
  United States 33.28%
  France 8.91%
  Germany 8.59%
  United Kingdom 4.24%
  Italy 3.98%
  Canada 2.34%
  MA 1.88%
  India 1.82%
  Brazil 1.77%
  Netherlands 1.71%
  Japan 1.71%
  Australia 1.59%
  Egypt 1.48%
  DZ 1.41%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 26.25%
Dell 20.30%
Acer 18.56%
ASUS 10.96%
Toshiba 5.82%
Samsung 3.70%
Lenovo 3.65%
Intel 1.45%
American Megatrends 1.04%
Medion 0.89%
Common models
HP Pavilion dv6 Notebook ... 7.13%
HP Pavilion g6 Notebook P... 6.34%
HP Pavilion dv7 Notebook ... 5.83%
ASUS All Series 4.54%
Dell Inspiron N5110 2.87%
HP Pavilion g7 Notebook P... 2.63%

About CACE Technologies

CACE is the sponsor behind Wireshark and WinPcap, the most widely used Open Source network traffic capture and analysis tools.
Publisher URL: www.cacetech.com


user comment
No one has commented yet. Help others learn more about this software, share your comments.