Ask Your Question
0

Wireshark capture problem when connected to VPN (PPTP)

asked 2020-07-15 13:10:11 +0000

Mandelli gravatar image

updated 2020-07-15 13:12:42 +0000

Dear all,

I am experiencing a weird behaviour with my wireshark. Whenever i activate the capture for the ppp(VPN) interface, everything network related stops working (internet navigation, network drives, etc).

When I look at the capture itself I can only see the packets from my workstation to the remote network (with the VPN addresses).

Immediately after I stop the capture, everything goes back to normal.

Any thoughts?

Thanks much!

edit retag flag offensive close merge delete

Comments

Can you add the output of wireshark -v or Help->About Wireshark

Chuckc gravatar imageChuckc ( 2020-07-15 13:30:20 +0000 )edit

And the details of the OS and VPN type.

grahamb gravatar imagegrahamb ( 2020-07-15 13:37:29 +0000 )edit

Sure!

Version 3.2.5 (v3.2.5-0-ged20ddea8138) 
Copyright 1998-2020 Gerald Combs <[email protected]> and contributors. License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.html> This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. 
Compiled (64-bit) with Qt 5.12.8, with WinPcap SDK (WpdPack) 4.1.2, with GLib 2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4, with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos, with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using ...
(more)
Mandelli gravatar imageMandelli ( 2020-07-15 13:37:32 +0000 )edit

OS: Windows 10

VPN data:

Destination service: Windows remote access Type: PPTP Allow LCP Optional cryptography Auth: - EAP protocol (uses ldap to authenticate the user on AD) IPv4 details: - Use default gateway on remote network - Automatic metrics

My OS is in brazilian portuguese, so I had to translate the items literally!

Thanks a lot!

Mandelli gravatar imageMandelli ( 2020-07-15 13:45:09 +0000 )edit

There is a newer version of npcap which includes a new NDIS driver for Windows 10.
The npcap issues list has a few items related to VPN.

Chuckc gravatar imageChuckc ( 2020-07-15 14:52:06 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2020-07-16 07:56:20 +0000

grahamb gravatar image

As npcap is responsible for capture and all interactions with the IP stack this seems to be a question for npcap support over here.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-07-15 13:10:11 +0000

Seen: 3,592 times

Last updated: Jul 16 '20