Ask Your Question

The capture session could not be initiated on interface '\Device\NPF_Loopback' (Error opening adapter: The system cannot find the path specified. (3)).

asked 2019-10-13 23:59:29 +0000

FangYanjun gravatar image

updated 2019-10-27 09:42:27 +0000

grahamb gravatar image

Windows Installer (64-bit) 3.0.5 version After my laptop renew it's system, the wireshark doesn't work and gave me this information

edit retag flag offensive close merge delete


Can you give some more context, what do you do to make this message occur?

grahamb gravatar imagegrahamb ( 2019-10-14 09:39:47 +0000 )edit

I have more context on this topic but I am as well stucked on this same problem. When downloading, executing and opening wireshark for the very first time on the laptop, all I could see is "Adapter for loopback traffic capture" and "USBcap1". When trying to run option #1, the following message displays:

The capture session could not be initiated on interface '\Device\NPF_Loopback' (Error opening adapter: The system cannot find the path specified. (3)).

Please check to make sure you have sufficient permissions, and that you have the proper interface or pipe specified.

I have tried deleting the software and downloading a new wireshark installer from the wireshark official website but this does not solve the problem.

Rodrigo0103 gravatar imageRodrigo0103 ( 2019-10-18 18:04:08 +0000 )edit

Can you open a PowerShell prompt and type Get-Service npcap? Copy the output into another comment.

grahamb gravatar imagegrahamb ( 2019-10-18 18:18:04 +0000 )edit

2 Answers

Sort by ยป oldest newest most voted

answered 2019-10-18 18:27:16 +0000

The problem is that npcap is not actually running, another default windows version (I guess) is currently in control and you need to run npcap to actually be able to see traffic with Wireshark.

To solve this issue, you will need to have downloaded npcap (the latest version is a recommended option).

Step 1: Run the command prompt as administrator (right click -> run as administrator) Step 2: type the following in the cmd: net start npcap Step 3: Relaunch Wireshark

This time you should be able to see much more options and you will be able to see Wi-Fi as an option.

This question was also solved in the following question thread:

edit flag offensive delete link more


Unfortunately neither the question you have linked nor your comments and answers here have definitely confirmed that the npcap service was running.

Presumably in your case, the re-install of npcap started the service.

It would be nice to know how the service got stopped.

grahamb gravatar imagegrahamb ( 2019-10-18 18:35:06 +0000 )edit

Thanks, Rodrigo0103, I was having the same issue and after starting the service "net start npcap", I was able to see other interfaces and my Wi-Fi in "Wireshark . Capture Interfaces" window. I closed my Wireshark before starting the service and relaunched it again, I was able to see my Wi-Fi and other interfaces where I can capture the traffic. The "net start npcap" service was already installed and it only needs to be restarted. Thanks again!

husseins gravatar imagehusseins ( 2020-03-21 20:20:56 +0000 )edit

answered 2020-03-10 07:34:11 +0000

Faisal gravatar image

updated 2020-03-10 07:38:03 +0000

I had the same problem and I soved it by uninstalling/reinstalling the driver of Ethernet/Wi-Fi adapter. First you need to download the driver of your adapter then go to the device manager and uninstall your current driver and install it againg. Notice that if you uninstall your adapter you will lost your Intetnet connection, so if somthing goes wrong restart your system and you should be fine.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools



Asked: 2019-10-13 23:59:29 +0000

Seen: 52,512 times

Last updated: Mar 10 '20