Re: NPCAP Blue screen

[食肉大灰兔V5 <hsluoyz () gmail com>]

Hi Luff,

First thanks for the report!

Unfortunately Npcap has updated to VS2015 Update1, WDK 10 10586 and SDK 10
10586 since version 0.05 R11. Versions prior to 0.05 R11 needs to be built
with the legacy WDK 10 10240 and SDK 10 10240, which I both already
uninstalled (and I don't have those installers kept). Currently Microsoft
only has the link to the latest WDK and SDK (which is 10586). So it's
impossible for me to recompile that version's binaries for now. So without
those built debug symbols I can't analyze the cause of the BSoD. So I
wonder would you mind to reproduce the BSoD in a recent Npcap version? The
latest 0.05 R14 is best. But a version not prior than 0.05 R11 is also OK.
Thanks!


Cheers,
Yang

On Tue, Feb 23, 2016 at 5:57 PM, Luff, Vince <vince.luff () anite com> wrote:

> Hello,
>
>
>
> I am using Npcap on Windows7 32bit SP1, and have seen a blue screen 3
> times over the past month. I’ve attached the .dmp files:
>
>
>
> *Date of crash*                     *NPCAP version  *                *DMP
> file*                                               *Suspected file*
>
> 29 Jan                                    0.05 r3
>                                 012916-15038-01.dmp
> npf.sys
>
> 4 Feb                                     0.05 r3
>                                 020416-15428-01.dmp
> npf.sys
>
> 10 Feb                                   0.05 r10
>                 curr021016-18252-01.dmp            npcap.sys
>
>
>
>
>
> When these crashes happened I was tracing two adaptors simultaneously
> using tshark. One of them was a Microsoft Loopback Adapter which is used
> for a virtual machine.
>
> Since I got the third crash I disabled tracing on the Microsoft Loopback
> Adapter and have not had a blue screen since.
>
>
>
> Please let me know if I should provide more information.
>
>
>
> By the way, I work for telecoms company Anite Telecoms in the UK.
>
>
>
> Regards,
>
> Vince Luff.
>
>
>
>
> Please refer to www.anite.com for individual Anite company details. The
> contents of this e-mail and any attachments are for the intended recipient
> only. If you are not the intended recipient, you are not authorised to and
> must not disclose, copy, distribute, or retain this message or any part of
> it. It may contain information which is confidential and/or covered by
> legal professional or other privilege. Contracts cannot be concluded with
> us nor legal service effected by email.
>
> Anite Ltd.
> Registered in England No.1798114
> Registered Office: Ancells Business Park Fleet Hampshire GU51 2UZ United
> Kingdom
> VAT Registration No. GB 787 418187
>
> Scanned for viruses by Mimecast <http://www.mimecast.co.uk>.
>
> _______________________________________________
> Sent through the dev mailing list
> https://nmap.org/mailman/listinfo/dev
> Archived at http://seclists.org/nmap-dev/
_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/