WinPcap.Rpcapd

Description

This indicates an attempt to use the remote daemon feature of WinPcap.
WinPcap has Remote Capture capabilities. Rpcapd is a remote daemon that can perform network traffic captures and send data back remotely to a network sniffer.

Affected Products

WinPcap

Impact

Unexpected network communication

Technology

Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device

Behavior

• Reasonable

Default Ports

• TCP/2002

References

• http://www.winpcap.org/