Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

It could all be a coincidence of course but it get the feeling wireshark uninstall/reinstall is doing something fishy.

What Wireshark uninstall/reiinstall is doing is "uninstalling/reinstalling WinPcap or Npcap". In order to make it possible for Wireshark to capture network traffic, they have to install either WinPcap or Npcap, which has to install a kernel-mode driver into the networking stack so that it can see network packets as they're received or sent.

This will, of course, affect the networking stack. WinPcap is no longer actively being developed, but Npcap is, and problems have been reported with networking when it's installed, including problems with VPNs. See the Nmap issues list (Npcap doesn't have its own issues list, so its issues are mixed in with issues with Nmap).

It could all be a coincidence of course but it get the feeling wireshark uninstall/reinstall is doing something fishy.

What Wireshark uninstall/reiinstall is doing is "uninstalling/reinstalling WinPcap or Npcap". In order to make it possible for Wireshark to capture network traffic, they have to install either WinPcap or Npcap, which has to install a kernel-mode driver into the networking stack so that it can see network packets as they're received or sent.

This will, of course, affect the networking stack. WinPcap is no longer actively being developed, but Npcap is, and problems have been reported with networking when it's installed, including problems with VPNs. See the Nmap Npcap issues list (Npcap doesn't have its own issues list, so its issues are mixed in with issues with Nmap)..