Ask Your Question

Procedure Entry Point Not Found

asked 2019-07-20 15:06:56 +0000

When I launch Wireshark by opening a pcap file, I get this error: Procedure entry point PacketGetMonitorMode could not be located in the DLL C:\Windows|System32|Npcap\wpcap.dll

The wpcap.dll file is indeed present and where is should be.

However, Wireshark does proceed to open with the file anyway.

??? Thanks

edit retag flag offensive close merge delete


Can you provide complete Wireshark Help -> About Wireshark information?

cmaynard gravatar imagecmaynard ( 2019-07-20 15:43:40 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2019-07-20 15:45:11 +0000

grahamb gravatar image

Not entirely certain what's gone wrong there, but I would suggest the following as a recovery:

  1. Close all running Wireshark instances, and anything else that might be using npcap (e.g. nmap), even better to reboot.
  2. Uninstall any installations of npcap and WinPcap you find in the list of installed applications.
  3. Reboot.
  4. Ensure there are no installations of npcap or WinPcap left in the list of installed applications, if any found, repeat from step 2.
  5. Install the latest npcap from their website, currently 0.996.
edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2019-07-20 15:06:56 +0000

Seen: 492 times

Last updated: Jul 20 '19