Changes To More Information
            1  +How it Works
            2  +============
            3  +
     1      4   It is a "[`tcpdump`](http://www.tcpdump.org/)" executable, [WinPcap](http://www.winpcap.org/) library and driver wrapped in a simple executable that:
     2      5   
     3      6      1. Unpacks the files to a temporary directory;
     4      7      2. Installs and starts the "`npf`" driver (from [WinPcap](http://www.winpcap.org/));
     5      8      3. Runs `tcpdump.exe`; and
     6      9      4. Cleans up everything