nmap/npcap v0.9983

Npcap 0.9983

on GitHub

Installer and debug symbols available from https://npcap.org/#download

• Npcap can now detect newly-added network adapters without restarting the
  driver. Fixes #664.

• Loopback capture and injection no longer requires the Npcap Loopback Adapter
  to be installed. This is a minor API change, so Nmap 7.80 and earlier will
  still require the adapter to do localhost scans, but Wireshark and most other
  software will not require changes. Loopback capture uses the device name
  NPF_Loopback instead of NPF_{GUID}, where GUID has to be looked up in
  the Registry. The Npcap Loopback Adapter can still be installed by selecting
  "Legacy loopback support" in the installer or using the
  /loopback_support=yes command-line option. TheLoopbackSupport Registry
  value will always be 0x00000001.

• The DltNull Registry setting and the /dlt_null installer option are no
  longer supported. Loopback capture will use the DLT_NULL link type as
  described in the tcpdump
  documentation. Loopback packet
  injection will also use this link type instead of requiring a dummy Ethernet
  header to be constructed. The DltNull Registry value will still be present
  and set to 1 for software that consults this value.

• Some operations like pcap_stats() can now be completed even after the
  adapter that was in use is removed. See #1650.

• Fixed a crash that could happen when stopping the driver during a loopback
  traffic capture. Fixes #1678.