Stopping the WinPcap Packet capture service

The WinPCap services is known as “NPF” (NetGroup Packet Filter), you can start/stop it on command line with c:\>net start npf The NetGroup Packet Filter Driver service was started successfully. C:\>net stop npf The NetGroup Packet Filter Driver service was stopped successfully. To find it in a GUI, you’ll have to open “Properties” for “My … Read more

What is Kernel Times

Understanding User and Kernel Mode http://blog.codinghorror.com/understanding-user-and-kernel-mode/ In Kernel mode, the executing code has complete and unrestricted access to the underlying hardware. It can execute any CPU instruction and reference any memory address. Kernel mode is generally reserved for the lowest-level, most trusted functions of the operating system. Crashes in kernel mode are catastrophic; they will … Read more