nmap/npcap v1.80

Npcap 1.80

on GitHub

Installer and debug symbols available at https://npcap.com/#download

• On ARM64, Npcap now installs ARM64X pure-forwarder DLLs so that Npcap can be used by x86_64
  processes running under emulation as well as x86 and ARM64 processes. Programmers do not need to
  make any special changes to take advantage of this feature. Fixes #585.

• Npcap now supports packet capture on SR-IOV virtual function adapters directly. Some
  manufacturers, such as Intel, were already supported because they use a separate miniport driver
  on top of the virtual function driver. Others that use a virtual function only, such as Broadcom,
  are now supported. Fixes #34.

• Due to Microsoft's deprecation of software publisher certificates with kernel-mode signing
  capability, installations of Npcap on Windows 7, 8, and 8.1 will use the Npcap 1.79 driver by
  default. The Npcap 1.80 driver can be chosen in the GUI and via the /latest_driver=yes
  command-line option if driver signing is disabled in Windows. See #751.

• Addressed faults found with Application Verifier: WSACleanup() was not being called in some
  cases, and in other cases was called from the DllMain() function of wpcap.dll, which Microsoft
  warns may cause deadlocks. Fixes #742.

• Fixed a BSoD crash due to a race condition between NPF_DetachAdapter and
  NPF_Cleanup when closing a capture handle. Fixes #746.

• Upgraded build system to Visual Studio 2022. This version prevents building drivers for earlier
  Windows versions, so the npcap.sys driver for Windows 7 through 8.1 is still built on Visual
  Studio 2019. See #629.