Boaz Brickner edited this page Jul 28, 2017 · 9 revisions

Welcome to Pcap.Net - the open-source, .NET wrapper for WinPcap written in C++/CLI and C#, which features almost all WinPcap features and includes a packet interpretation framework.

This wiki is the main source of documentation for users and developers of Pcap.Net.

Quick navigation

Using Pcap.Net Developing Pcap.Net
User Guide Developer Guide
Tutorial and user guide for using Pcap.Net How to change Pcap.Net

Need help?

Use the Pcap.Net Q&A Group to ask questions.


.Net wrap for WinPcap


  • Getting the list of Live Devices on the local host.
  • Reading packets from Live Devices (Network Devices) and Offline Devices (Files) using the different WinPcap methods.
  • Receiving statistics on the entire capture.
  • Receiving statistics of packets instead of the full packets.
  • Using different sampling methods.
  • Applying Berkley Packet Filters.
  • Sending packets to Live Devices directly or using WinPcap's send queues.
  • Dumping packets to Pcap files.
  • Using Enumerables to receive packets (and LINQ). Not including:
  • AirPcap features.
  • Remote Pcap features.

Packet interpretation

  • Ethernet + VLAN tagging (802.1Q)
  • ARP
  • IPv4
  • IPv6
  • GRE
  • ICMP
  • IGMP
  • UDP
  • TCP
  • DNS
  • HTTP

Projects based on Pcap.Net

You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.
Press h to open a hovercard with more details.