Where can I find WinPcap in system control, I assumed it is running as a service but it seems I am mistaken.
I started WinPcap via command line (source):
runas /u:administrator "net start npf"
Before starting WinPcap Wireshark didn't show any capture interfaces and afterwards it does. So I assume it is running. But I can't find it in the services list of the task manager.
To narrow down the candidates I compared running services after starting and stopping WinCap but there is no difference.
How can I directly confirm that this "service" is running on Windows 8?
C:\WINDOWS\system32>sc query "npf" SERVICE_NAME: npf TYPE : 1 KERNEL_DRIVER STATE : 4 RUNNING (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN) WIN32_EXIT_CODE : 0 (0x0) SERVICE_EXIT_CODE : 0 (0x0) CHECKPOINT : 0x0 WAIT_HINT : 0x0
sc query lists 85 services - none of which is "npf" - but
sc query npf will find it.