basil00/WinDivert

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

3266 stars · 604 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

WinDivert is a user-mode packet interception library for Windows that allows applications to capture, modify, drop, and re-inject network packets via a kernel-mode driver. It provides a simple C API with a high-level filtering language and supports loopback traffic and full IPv6.

Use cases

• capture and dump network packets on windows
• build a user-mode firewall application
• sniff and analyze network traffic
• redirect tcp streams to a local proxy
• implement a nat or vpn tunnel on windows
• filter or block urls at the packet level
• track network flows and socket operations

When to choose

• you need user-mode packet interception, modification, or re-injection on windows
• you are building firewalls, sniffers, NATs, VPNs, or tunneling tools for windows
• you need loopback (localhost) traffic capture or full IPv6 support
• you want a simple C API with a high-level packet filter language

When to avoid

• you are targeting linux, macos, or other non-windows platforms
• you only need passive packet capture without modification (simpler tools like pcap may suffice)
• you cannot install signed kernel drivers or lack administrator privileges
• you need a managed-language library without native interop

Facets

library · maturity stable

networking security proxy developer-tools networking security windows developer-tools windows cpp c packet-capture packet-sniffer firewall kernel-driver traffic-analysis vpn nat ids tunneling ipv6 loopback

Member repositories

For agents

markdown · JSON · MCP: product_card(name="basil00/WinDivert")