I am curious about how the NPM agent utilizes a hardware network interface when collecting packets. Does this go through winpcap, through the windows network stack, or something else? I see in the documentation that winpcap is mentioned, however this seems to be for syslog forwarding only, not necessarily for packet capture.
If the NPM agent does utilize winpcap, have they overcome the inherent limitation of only being able to access one interface and one instance at a time?
Lastly, is the agent a 64 bit or 32 bit application?
The QoE capture is performed by pcap library, and yes, we're limited to a single interface. Agent is 64-bit architecture.