Wireshark-users: [Wireshark-users] Newbie question about capture point
From: "Gajan Nadarajan" <gajannada@xxxxxxxxx>
Date: Thu, 28 Jun 2007 11:25:43 -0700
Hello,

I am new to wireshark and was wonder where exactly does wireshark capture eth packets or frames on the windows stack( or somwhere on NDIS)?

Would it be before it reaches the driver?

Thank you.