Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Npcap Bug Report #1790

Open
wbobroff opened this issue Oct 18, 2019 · 3 comments

Comments

@wbobroff
Copy link

@wbobroff wbobroff commented Oct 18, 2019

Running Wireshark in administrator mode, capture image produces the following error message:
The capture session could not be initiated on interface '\Device\NPF_Loopback' (Error opening adapter: The system cannot find the path specified. (3)).

The only interface listed on Wireshark is the adapter for loopback capture.

DiagReport-20191019-015417.txt

@dmiller-nmap

This comment has been minimized.

Copy link

@dmiller-nmap dmiller-nmap commented Oct 24, 2019

Thanks for this bug report. It is not recommended to run Wireshark in administrator mode (high-integrity process) because of the risk of bugs in packet dissectors. Npcap should allow regular users to perform network capture. Does Wireshark work correctly when run without elevation or UAC prompt?

@wbobroff

This comment has been minimized.

Copy link
Author

@wbobroff wbobroff commented Oct 25, 2019

No it does not that's why I installed it in admin mode in the first place. I installed the newest update 3.06 just now and the same error occurs. The first time I used wireshark it was fine, then when it prompted me to update and to remove the older version of npcap that's when it stopped working.

Capture1

Capture2

@gbloice

This comment has been minimized.

Copy link

@gbloice gbloice commented Oct 27, 2019

We have seen quite a few of these reports over at Ask Wireshark.

Generally the npcap service isn't running, and attempting to start it results in a few outcomes:

  • The service starts and all the expected interfaces show up. Some users report that after a reboot the service has stopped again and must be restarted.
  • The service doesn't start, reporting an 0x435 exit code.
  • The service doesn't start and reports system error 2 and "The system cannot find the file specified."

I try to get the diagnostic report from users and get them to start the service, but if that doesn't work point them over here.

Hopefully all the appropriate questions at Ask Wireshark are tagged with npcap in case you need to look further.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
3 participants
You can’t perform that action at this time.