> fwiw, have you looked at:
>
> http://netgroup-serv.polito.it/analyzer/install/windump/default.htm
>
> the reason i mention this is that it seems possible that there might
> be a port of libpcap contained within...
I've looked at it, but I don't know Italian, so I can't fully determine
what the story is. Most of the stuff under
http://netgroup-serv.polito.it/analyzer/
appears to be in Italian (not entirely surprisingly, where it was
done...), the fact that the page at that URL isn't in Italian
nonwitstanding.
In some places, I see things that *appear* to imply that they actually
have a "libpcap" port - and that source to some or all of the stuff they
did might be available.
However, I downloaded the NT driver part of it, and it comes with a
driver and a DLL - and the names of the routines in the DLL suggest that
it might be based on a sample driver and library supplied as part of the
NT DDK, in which case
1) it's not a "libpcap" port
and
2) it's probably not redistributable in source form.
However, they might have implemented a "libpcap" *atop* that library.
