I am trying to capture packets from vmware virtual network adapter and modified the WinpkFilter NDIS IM driver as you recommended:
HKR, NdiInterfaces, FilterMediaTypes, , “nolower, ethernet, wan”
However, I cannot see the vmware virtual network adapter in my proc. I am thinking my proc supposes to show vmware network adapter as long as I put nolower in the filtermediatype. Am I correct? If I am correct, why my proc still cannot see vmware network adapter? Any suggestions?