Npcap
E484052
Npcap is a high-performance packet capture and network monitoring library for Windows, commonly used by tools like Wireshark for low-level network traffic analysis.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Npcap canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T4980099 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Npcap Context triple: [Wireshark, usesLibrary, Npcap]
-
A.
Wireshark
Wireshark is a widely used open-source network protocol analyzer that captures and interactively inspects traffic on computer networks for troubleshooting, analysis, and security auditing.
-
B.
Netcat
Netcat is a versatile command-line networking utility used for reading from and writing to network connections, often referred to as the "Swiss Army knife" of TCP/IP.
-
C.
Windows Filtering Platform
Windows Filtering Platform is a set of APIs and system services in Microsoft Windows that enables developers and the operating system to create, manage, and filter network traffic at various layers of the networking stack.
-
D.
Ettercap
Ettercap is a network security tool used for sniffing, intercepting, and manipulating traffic on local area networks, commonly employed for man-in-the-middle attacks and protocol analysis.
-
E.
NETCOM
NETCOM is a major U.S. Army command responsible for operating, securing, and managing the Army’s global enterprise network and communications infrastructure.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Npcap Target entity description: Npcap is a high-performance packet capture and network monitoring library for Windows, commonly used by tools like Wireshark for low-level network traffic analysis.
-
A.
Wireshark
Wireshark is a widely used open-source network protocol analyzer that captures and interactively inspects traffic on computer networks for troubleshooting, analysis, and security auditing.
-
B.
Netcat
Netcat is a versatile command-line networking utility used for reading from and writing to network connections, often referred to as the "Swiss Army knife" of TCP/IP.
-
C.
Windows Filtering Platform
Windows Filtering Platform is a set of APIs and system services in Microsoft Windows that enables developers and the operating system to create, manage, and filter network traffic at various layers of the networking stack.
-
D.
Ettercap
Ettercap is a network security tool used for sniffing, intercepting, and manipulating traffic on local area networks, commonly employed for man-in-the-middle attacks and protocol analysis.
-
E.
NETCOM
NETCOM is a major U.S. Army command responsible for operating, securing, and managing the Army’s global enterprise network and communications infrastructure.
- F. None of above. chosen
Statements (48)
| Predicate | Object |
|---|---|
| instanceOf |
Windows software
ⓘ
network monitoring library ⓘ packet capture library ⓘ software ⓘ |
| basedOn | WinPcap NERFINISHED ⓘ |
| category |
Windows-only free software
ⓘ
network analysis software ⓘ packet analyzers ⓘ |
| compatibleWith | WinPcap API NERFINISHED ⓘ |
| component |
Npcap DLL
NERFINISHED
ⓘ
Npcap driver ⓘ Npcap service NERFINISHED ⓘ |
| developer | Nmap Project NERFINISHED ⓘ |
| distribution |
bundled with Nmap
ⓘ
bundled with Wireshark ⓘ standalone installer ⓘ |
| implements | libpcap API ⓘ |
| license |
free for non-commercial use
ⓘ
proprietary license ⓘ |
| maintainer | Gordon Lyon NERFINISHED ⓘ |
| operatingSystem |
Windows
ⓘ
surface form:
Microsoft Windows
|
| platform | Windows ⓘ |
| programmingLanguage | C ⓘ |
| replaces | WinPcap NERFINISHED ⓘ |
| requires | .NET Framework (for some tools using it) NERFINISHED ⓘ |
| securityFeature |
digitally signed driver
ⓘ
limited access to administrators by default ⓘ |
| supportsArchitecture |
32-bit Windows
ⓘ
64-bit Windows ⓘ |
| supportsFeature |
IPv4 traffic capture
ⓘ
IPv6 traffic capture ⓘ NPF driver ⓘ WinPcap-compatible mode ⓘ high-performance capture ⓘ kernel-level packet filtering ⓘ loopback packet capture ⓘ packet injection ⓘ raw 802.11 Wi-Fi capture ⓘ |
| supportsInterface | WinPcap-compatible capture interface names ⓘ |
| usedBy |
NetworkMiner
NERFINISHED
ⓘ
Nmap NERFINISHED ⓘ Wireshark NERFINISHED ⓘ Zenmap NERFINISHED ⓘ |
| usedFor |
network monitoring
ⓘ
network traffic analysis ⓘ packet capture ⓘ security auditing ⓘ |
| website | https://nmap.org/npcap/ ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Npcap Description of subject: Npcap is a high-performance packet capture and network monitoring library for Windows, commonly used by tools like Wireshark for low-level network traffic analysis.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.