|
I am using Windows 7 64bit edition; when i first installed Wireshark it worked, but after restart its constantly telling me NPF driver is not running error and therefore I cannot see any of my network cards. Please help |
|
I am using Wireshark on the 64-bit edition of Windows 7 without problem. The npf driver is not visible in your regular "Computer Management" WMI-interface. The npf status is best checked with the command line. Run a cmd.exe as administrator and run the command sc qc npf. You should get some output like this: If your driver is not properly started, activate it with the command sc start npf Finally, to start the service automatically, use the command sc config npf start=auto Remember to run your cmd.exe as administrator when issuing these command. I am running Windows 7 and I have the same issue with the NPF file not running. I tried your command line stuff. I am set as the administrator on this machine and I get an Access Denied error when I try the sc start npf. Any suggestions?
(19 Jan '11, 21:11)
Joshua
I have also activated NPF fow windows 7. And wireshark 1.4.3 still says it is not active. And also says there are no interfaces that a capture can be done. I'm running an HP Desktop and Windows 7 Home Premium.
(20 Jan '11, 17:39)
yate4899
2
There must be a space after equal sign, i.e. sc config npf start= auto The rest is perfect:
(02 Aug '11, 22:54)
Champion
Thank you packethunter, your answer enabled me to get working with Wireshark. One thing though, I can't find the npf service - whose DISPLAY_NAME is given as "NetGroup Packet Filter Driver" listed in the Windows Services. Can anyone enlighten me please?
(17 Oct '11, 16:56)
pcwizard
2
You can find the NPF driver under Non-Plug and Play Drivers
(17 Oct '11, 21:14)
joke
I had to go into the non-plug and play how do I get it to start once I get there?
(10 May '12, 20:01)
angelar
right-click NetGroup Packet Filter Driver
(10 May '12, 21:18)
joke
Tanx alot, was really helpfull.
(02 Mar, 13:28)
s_atayi379
You need to add a space between "
(14 Jun, 03:10)
Mladen B
showing 5 of 10
show 5 more comments
|
|
try to run cmd.exe as an administrator (i mean right click it then choose run as administrator) and then use the command sc start npf Great!! it is working...BIG THANKS to you. Back to business!
(12 Jan '12, 07:35)
deo
Sorry: I meant for the above "Great ..." to have been converted to a comment under answer #1 (not this answer).
(12 Jan '12, 08:05)
Bill Meier ♦
|
|
Just run the shark under administrator and it will work as well. 1
While this may well "work" it isn't really recommended. There is a huge amount of code in Wireshark that attempts to interpret network data, and allowing that code to run as administrator does open a window (albeit quite small) to "bad stuff" gaining access to the host system as the administrator.
(04 Aug '11, 01:18)
grahamb ♦
|
Hi all, I have the exact same symptoms but without the NPF driver error and also I get the proper output from the SC command. Any ideas?