nerdexam
EC-Council

312-50V13 · Question #187

A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and library are required to allow the NIC to work in promiscuous mode?

The correct answer is D. Winpcap. This question identifies the necessary driver and library for Wireshark to enable promiscuous mode on a Windows laptop.

Submitted by carter_n· Mar 6, 2026Sniffing

Question

A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what river and library are required to allow the NIC to work in promiscuous mode?

Options

  • ALibpcap
  • BAwinpcap
  • CWinprom
  • DWinpcap

How the community answered

(19 responses)
  • C
    5% (1)
  • D
    95% (18)

Why each option

This question identifies the necessary driver and library for Wireshark to enable promiscuous mode on a Windows laptop.

ALibpcap

Libpcap is the equivalent packet capture library used on Unix-like operating systems (such as Linux and macOS), not directly on Windows.

BAwinpcap

Awinpcap is not a recognized or standard packet capture library or driver used for Wireshark on Windows systems.

CWinprom

Winprom is not a known or standard packet capture library or driver associated with Wireshark's functionality on Windows.

DWinpcapCorrect

WinPcap is the standard and widely used packet capture library and driver for Windows, which Wireshark relies upon to allow a network interface card (NIC) to enter promiscuous mode and capture all network traffic on a segment.

Concept tested: Wireshark packet capture on Windows

Source: https://nmap.org/npcap/

Topics

#Wireshark#WinPcap#Promiscuous mode#Packet capture

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice