npcap filter bug

[Darrell Enns <darrell () darrellenns com>]

There seems to be an issue in npcap and certain capture filters. When I use
a capture filter like "port 443", I only get half of the conversation.
Packets from the remote port 443 to local random port are captured, but
packets from local random port to remote 443 are not captured. This was
using npcap 0.05-r4 and Wireshark 2.0.1 on Windows 10. The network
interface is an Intel 82579V. If I just switch to winpcap (no other
changes), it correctly captures both sides of the conversation.

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/