windows server 20212r2 - no interfaces found except loopback

[Thermi]

On current Windows server 2012r2, npcap does not find any interfaces besides the loopback one. Winpcap on the contrary finds the physical interfaces, but not the loopback one. So this is probably a regression in npcap.

[guyharris]

windows server 20212r2

...

On current Windows server 2012r2

Is that Windows Server 2012 R2, which hasn't been the current version for a long time, or is that Windows Server 2022, which is the current version?

[Thermi]

2012, I intended to convey that all Windows updates available are applied

Am 21. Juli 2022 22:29:39 UTC schrieb Guy Harris @.***>:

windows server 20212r2

...

On current Windows server 2012r2

Is that Windows Server 2012 R2, which hasn't been the current version for a long time, or is that Windows Server 2022, which is the current version?

-- Reply to this email directly or view it on GitHub: https://github.com/nmap/npcap/issues/613#issuecomment-1191994970 You are receiving this because you authored the thread.

Message ID: @.***> -- Sent from mobile

[guyharris]

So that's "Windows 8.1 Server", at least according to the Wikipedia article, so it should still be supported. (Perhaps the Npcap home page should say something such as "Npcap works on Windows 7/Windows Server 2008 R2 and later...".)

[guyharris]

Winpcap on the contrary finds the physical interfaces, but not the loopback one.

WinPcap doesn't show the loopback interface because the loopback interface is an Npcap-implemented device.

So this is probably a regression in npcap.

Regression from WinPcap, but Npcap uses significantly different kernel code from WinPcap, so it may not be a "regression" in the sense of "the code used to support it, but a change broke that" - more like "the new code does something different from the old code, so it doesn't find the physical interfaces". It does show physical interfaces on other machines, so there's something specific happening here.

Is this with the latest Npcap release, 1.70?

[Thermi]

yes

[dmiller-nmap]

@Thermi Thanks for reporting this. Please provide output from DiagReport as well as the install.log and NPFInstall.log files from the Npcap installation directory so we can better diagnose the problem. Any additional information would be helpful, such as:

• Has Npcap worked on this system previously?
• What software are you using that makes use of Npcap? Does Nmap (nmap --iflist) or Wireshark (dumpcap.exe -D) show the same symptom?
• Is there any special networking setup on the system, such as a VPN, WWAN (3G/LTE etc.), bridge, SR-IOV passthrough, or virtual network adapter?

[Thermi]

@dmiller-nmap

Thank you for your help. Requested files are attached.

Answers:

• Has Npcap worked on this system previously?: No
• What software are you using that makes use of Npcap? Does Nmap (nmap --iflist) or Wireshark (dumpcap.exe -D) show the same symptom?: packetbeat, yes, wireshark also does not show the interfaces
• Is there any special networking setup on the system, such as a VPN, WWAN (3G/LTE etc.), bridge, SR-IOV passthrough, or virtual network adapter?: No.

DiagReport-20220725-205656.txt NPFInstall.log install.log