WinPcap
E484051
WinPcap is a Windows packet capture and network monitoring library that provides low-level network access for tools like Wireshark.
All labels observed (2)
| Label | Occurrences |
|---|---|
| WinPcap canonical | 4 |
| WinPcap API | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T4980098 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: WinPcap Context triple: [Wireshark, usesLibrary, WinPcap]
-
A.
Wireshark
Wireshark is a widely used open-source network protocol analyzer that captures and interactively inspects traffic on computer networks for troubleshooting, analysis, and security auditing.
-
B.
Ettercap
Ettercap is a network security tool used for sniffing, intercepting, and manipulating traffic on local area networks, commonly employed for man-in-the-middle attacks and protocol analysis.
-
C.
Netcat
Netcat is a versatile command-line networking utility used for reading from and writing to network connections, often referred to as the "Swiss Army knife" of TCP/IP.
-
D.
Windows Filtering Platform
Windows Filtering Platform is a set of APIs and system services in Microsoft Windows that enables developers and the operating system to create, manage, and filter network traffic at various layers of the networking stack.
-
E.
Open Transport networking
Open Transport networking is Apple’s modernized networking architecture and API framework that provided improved performance and protocol support for classic Mac OS systems.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: WinPcap Target entity description: WinPcap is a Windows packet capture and network monitoring library that provides low-level network access for tools like Wireshark.
-
A.
Wireshark
Wireshark is a widely used open-source network protocol analyzer that captures and interactively inspects traffic on computer networks for troubleshooting, analysis, and security auditing.
-
B.
Ettercap
Ettercap is a network security tool used for sniffing, intercepting, and manipulating traffic on local area networks, commonly employed for man-in-the-middle attacks and protocol analysis.
-
C.
Netcat
Netcat is a versatile command-line networking utility used for reading from and writing to network connections, often referred to as the "Swiss Army knife" of TCP/IP.
-
D.
Windows Filtering Platform
Windows Filtering Platform is a set of APIs and system services in Microsoft Windows that enables developers and the operating system to create, manage, and filter network traffic at various layers of the networking stack.
-
E.
Open Transport networking
Open Transport networking is Apple’s modernized networking architecture and API framework that provided improved performance and protocol support for classic Mac OS systems.
- F. None of above. chosen
Statements (48)
| Predicate | Object |
|---|---|
| instanceOf |
Windows software
ⓘ
free software ⓘ network monitoring library ⓘ packet capture library ⓘ |
| basedOn | libpcap ⓘ |
| compatibleWith |
libpcap API
ⓘ
linked to:
libpcap
|
| component |
low-level network adapter interface
ⓘ
packet capture driver ⓘ remote capture daemon ⓘ user-mode capture library ⓘ |
| developer |
CACE Technologies
ⓘ
Riverbed Technology ⓘ |
| distribution |
bundled with Wireshark installers
ⓘ
standalone installer ⓘ |
| lastStableVersion | 4.1.3 ⓘ |
| license | BSD-style license ⓘ |
| operatingSystem |
Microsoft Windows
ⓘ
linked to:
Windows
|
| platform |
32-bit Windows
ⓘ
64-bit Windows ⓘ |
| provides |
BPF-like filtering capabilities
ⓘ
link-layer packet access ⓘ low-level network access ⓘ raw packet capture ⓘ |
| releaseType | stable release ⓘ |
| replacedBy | Npcap ⓘ |
| status | discontinued ⓘ |
| supportsFeature |
buffered packet capture
ⓘ
kernel-level packet filtering ⓘ network traffic monitoring ⓘ packet capture ⓘ promiscuous mode capture ⓘ remote packet capture ⓘ timestamping of packets ⓘ user-level packet capture API ⓘ |
| supportsProtocol |
Ethernet
ⓘ
IPv4 ⓘ IPv6 ⓘ TCP ⓘ UDP ⓘ |
| targetAudience |
network administrators
ⓘ
network application developers ⓘ security professionals ⓘ |
| usedBy |
NetworkMiner
ⓘ
Nmap ⓘ Snort ⓘ Wireshark ⓘ tcpdump for Windows ⓘ |
| website | https://www.winpcap.org/ ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: WinPcap Description of subject: WinPcap is a Windows packet capture and network monitoring library that provides low-level network access for tools like Wireshark.
Referenced by (5)
Full triples — surface form annotated when it differs from this entity's canonical label.