why didn't Wireshark find any network interfaces ?

asked 2019-09-27 16:13:39 +0000

ploise gravatar image

updated 2019-09-27 16:31:02 +0000

grahamb gravatar image

After installation there is no network interfaces finded. Only the loopback interface is present. Is it possible to find interfaces manually ?



edit retag flag offensive close merge delete


Presumably this is on Windows, so is likely to be an npcap issue (if using the current version of Wireshark).

Can you copy (highlight the text with the mouse) and then paste the contents of the Help -> About Wireshark dialog into a comment here?

grahamb gravatar imagegrahamb ( 2019-09-27 16:28:36 +0000 )edit

Thank you for your help. Here it is :

Version 3.0.5 (v3.0.5-0-g752a55954770) 

Copyright 1998-2019 Gerald Combs <[email protected]> and contributors. License GPLv2+: GNU GPL version 2 or later <http://www.gnu.org/licenses/old-licenses/gpl-2.0.html> This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. 

Compiled (64-bit) with Qt 5.12.5, with WinPcap SDK (WpdPack) 4.1.2, with GLib 2.52.2, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.14.0, with Lua 5.2.4, with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos, with MaxMind DB resolver, with nghttp2 1.39.2, with LZ4, with Snappy, with libxml2 2.9.9, with QtMultimedia, with AirPcap, with SBC, with SpanDSP, with bcg729. 

Running ...
ploise gravatar imageploise ( 2019-09-27 16:38:10 +0000 )edit

You're running the latest stable version of Wireshark and the latest version of npcap so that's good.

Can you run the following command in an elevated command prompt and post the results back here:

'C:\Program Files\Npcap\DiagReport.bat'

Note that the contents of the report might be too big to post as a comment, so you'll have to upload it to a public file share, e.g. Google Drive, DropBox etc. and then post a link to the file back here.

grahamb gravatar imagegrahamb ( 2019-09-27 19:54:36 +0000 )edit

@echo off

net session >nul 2>&1
if not "%errorLevel%" == "0" (
  rem This tools must run with administrator permissions
  rem It will popup the UAC dialog, please click [Yes] to continue.
  echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
  echo UAC.ShellExecute "%~s0", "%*", "", "runas", 1 >> "%temp%\getadmin.vbs"
  exit /b 2

set dir=%~dp0
set scriptPath=%dir%DiagReport.ps1
for /f "tokens=*" %%a in ('powershell Get-ExecutionPolicy') do (
set originPolicy=%%a
powershell Set-ExecutionPolicy 0

rem this call only works for Administrator
rem powershell %scriptPath%

rem This call works also for normal users
rem "No Exit" version:
rem powershell -NoExit -noprofile -command "&{start-process powershell -ArgumentList '-NoExit -noprofile -file \"%scriptPath%\"' -verb RunAs}"
rem "Exit" version:
powershell -noprofile -command "&{start-process powershell -ArgumentList '-noprofile -file \"%scriptPath%\"' -verb RunAs}"

powershell Set-ExecutionPolicy %originPolicy%

rem pause
ploise gravatar imageploise ( 2019-09-30 10:22:12 +0000 )edit

That seems to be the contents of the batch file, not the diagnostic report it produces. You have to run the batch file from an elevated prompt, it will produce a report (opened in notepad for your convenience), and that report is what I'd like to see.

grahamb gravatar imagegrahamb ( 2019-09-30 10:40:54 +0000 )edit