 | 1 | initial version |
What I do currently (on WIndows) is to stop / disable the autostart capture service. For that you need to run a elevated (administrative) command prompt and enter
sc config npf start=demand (if using WinPCAP)
sc config npcap start=demand (if using npcap)
That prevents the capture driver to load on start. If I need to capture I open the elevated command prompt again and run
sc start npcap
which runs the npcap capture service until the next reboot, or until I stop it again using
sc stop npcap
If you use WinPCAP you need to replace "npcap" with "npf" in both commands.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.