npcap icon indicating copy to clipboard operation
npcap copied to clipboard

Installing v1.70 on Windows appears not to work

Open Activebits opened this issue 2 years ago • 2 comments

I have just upgraded WireShark to a new version on Windows 11 and as part of the process I have re-installed npcap v1.70. My previous version of WireShark and npcap was working fine.

WireShark seems to think npcap isn't installed and doesn't list the network interfaces.

I can see npcap files in 'Program Files\npcap' and 'Windows\System32\npcap' but I don't think npcap is running. If I type 'net start npcap' in an administrator command window I get 'The service name is invalid'. Running 'sc query npcap' returns '[SC] EnumQueryServicesStatus:OpenService FAILED 1060: The specified service does not exist as an installed service.'

I have generally restarted the PC between installs and uninstalls. I am not an experienced npcap (or WireShark) user and now I have no idea what to do next .

Activebits avatar Jul 28 '22 13:07 Activebits

I have attached the install log and the npcap diagnostics report.

install.log DiagReport-20220728-172004.txt

I don't know what to expect but I can see lots of things get installed apparently without error, but right at the end of the diagnostic report, there is this:

`HKLM:\SYSTEM\CurrentControlSet\Services\npf: Not present. HKLM:\SYSTEM\CurrentControlSet\Services\npf\Parameters: Not present. HKLM:\SYSTEM\CurrentControlSet\Services\npf_wifi: Not present.


Service Info:


Get-Service : Cannot find any service with service name 'npcap'. At C:\Program Files\Npcap\DiagReport.ps1:212 char:1

  • Get-Service npcap
  •   + CategoryInfo          : ObjectNotFound: (npcap:String) [Get-Service], ServiceCommandException
      + FullyQualifiedErrorId : NoServiceFoundForGivenName,Microsoft.PowerShell.Commands.GetServiceCommand
    
    

Get-Service : Cannot find any service with service name 'npf'. At C:\Program Files\Npcap\DiagReport.ps1:214 char:1

  • Get-Service npf
  •   + CategoryInfo          : ObjectNotFound: (npf:String) [Get-Service], ServiceCommandException
      + FullyQualifiedErrorId : NoServiceFoundForGivenName,Microsoft.PowerShell.Commands.GetServiceCommand`
    
    

I don't know if the missing registry key npf matters but I assume the service not starting is the error causing npcap not to work?

What do I do? (Simply, please).

Activebits avatar Jul 28 '22 16:07 Activebits

@Activebits https://github.com/nmap/npcap/issues/628 Use npcap 1.60 on Windows 11 until the issue is resolved.

httpstorm avatar Oct 19 '22 20:10 httpstorm