Symantec DLP v10x supports Winpcap 4.0.2. Symantec DLP v11x supports 4.1.1 and higher. Symantec DLP v12x supports 4.1.2 and higher.
Note: Winpcap is only required on Windows-based Network Monitors that do not use Endace.
Relevant versions: 8.0 - 10.5.3
Caveat: The default installation of Winpcap 4.0 might not configure itself to load the filter driver automatically. If you have problems capturing data on a new Symantec DLP Detection server, please check the following instructions. These changes will force WinPCAP to load when the machine boots
1. Run 'net stop "Vontu Monitor"'
2. Run 'net stop npf'
3. If it is not already present on the machine, install WinPcap 4.0