Ask Your Question

The capture session could not be initiated on interface '\Device\NPF_Loopback' (Error opening adapter: The system cannot find the path specified. (3)).

asked 2019-10-13 23:59:29 +0000

FangYanjun gravatar image

updated 2019-10-27 09:42:27 +0000

grahamb gravatar image

Windows Installer (64-bit) 3.0.5 version After my laptop renew it's system, the wireshark doesn't work and gave me this information

edit retag flag offensive close merge delete


Can you give some more context, what do you do to make this message occur?

grahamb gravatar imagegrahamb ( 2019-10-14 09:39:47 +0000 )edit

I have more context on this topic but I am as well stucked on this same problem. When downloading, executing and opening wireshark for the very first time on the laptop, all I could see is "Adapter for loopback traffic capture" and "USBcap1". When trying to run option #1, the following message displays:

The capture session could not be initiated on interface '\Device\NPF_Loopback' (Error opening adapter: The system cannot find the path specified. (3)).

Please check to make sure you have sufficient permissions, and that you have the proper interface or pipe specified.

I have tried deleting the software and downloading a new wireshark installer from the wireshark official website but this does not solve the problem.

Rodrigo0103 gravatar imageRodrigo0103 ( 2019-10-18 18:04:08 +0000 )edit

Can you open a PowerShell prompt and type Get-Service npcap? Copy the output into another comment.

grahamb gravatar imagegrahamb ( 2019-10-18 18:18:04 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2019-10-18 18:27:16 +0000

The problem is that npcap is not actually running, another default windows version (I guess) is currently in control and you need to run npcap to actually be able to see traffic with Wireshark.

To solve this issue, you will need to have downloaded npcap (the latest version is a recommended option).

Step 1: Run the command prompt as administrator (right click -> run as administrator) Step 2: type the following in the cmd: net start npcap Step 3: Relaunch Wireshark

This time you should be able to see much more options and you will be able to see Wi-Fi as an option.

This question was also solved in the following question thread:

edit flag offensive delete link more


Unfortunately neither the question you have linked nor your comments and answers here have definitely confirmed that the npcap service was running.

Presumably in your case, the re-install of npcap started the service.

It would be nice to know how the service got stopped.

grahamb gravatar imagegrahamb ( 2019-10-18 18:35:06 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools



Asked: 2019-10-13 23:59:29 +0000

Seen: 678 times

Last updated: Oct 18