Since Npcap 1.60, capture handles have been able to withstand NDIS stack pause events (which happen during certain system configuration events) without closing, restoring packet capture when the event completes. However, this restoration is dependent on the handle's OPEN_INSTANCE being in the OpenRunning state, and the reattachment after pause restores it to the OpenAttached state instead. Some operations restore the OpenRunning state, but packets that arrive before then will be missed.