why am i not able to see my interfaces in wireshark except USBPcaps 1,2,3? I am using windows 10 64 bit

asked 2018-03-19 11:27:48 +0000

this post is marked as community wiki

This post is a wiki. Anyone with karma >750 is welcome to improve it.

Hi i am using windows 10 64 bit machine ? i am not able to find my interfaces when i go under capture menu and then under options submenu. All i can see are the three USB interfaces

edit retag flag offensive close merge delete

Comments

Can you post the complete text of the Wireshark | Help | About Wireshark dialog? You can highlight it all and Ctrl + C to copy it to the clipboard, then paste it back in your question.

grahamb gravatar imagegrahamb ( 2018-03-19 12:38:08 +0000 )edit

I just installed v2.6.0 and the latest WinPcap and USBpcap support and now I also just see USB interfaces in the list. Here is the Help About info:

Version 2.6.0 (v2.6.0-0-gc7239f02) 

Compiled (64-bit) with Qt 5.9.4, with WinPcap (4_1_3), with GLib 2.42.0, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.14.0, with Lua 5.2.4, with GnuTLS 3.4.11, with Gcrypt 1.7.6, with MIT Kerberos, with MaxMind DB resolver, with nghttp2 1.14.0, with LZ4, with Snappy, with libxml2 2.9.4, with QtMultimedia, with AirPcap, with SBC, with SpanDSP, with bcg729. 

Running on 64-bit Windows 7 Service Pack 1, build 7601, with Intel(R) Core(TM) i7-4600U CPU @ 2.10GHz (with SSE4.2), with 8093 MB of physical memory, with locale English_United States.1252, without WinPcap, with GnuTLS ...
(more)
Carpy gravatar imageCarpy ( 2018-04-27 13:54:47 +0000 )edit

And from a cmd prompt what does sc query npf show?

grahamb gravatar imagegrahamb ( 2018-04-27 13:56:59 +0000 )edit

Here it is:

sc query npf

SERVICE_NAME: npf
    TYPE               : 1  KERNEL_DRIVER
    STATE              : 4  RUNNING
                            (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
    WIN32_EXIT_CODE    : 0  (0x0)
    SERVICE_EXIT_CODE  : 0  (0x0)
    CHECKPOINT         : 0x0
    WAIT_HINT          : 0x0

Interesting that the About window shows the following: "...without WinPcap..." Does this really mean it sees no WinPcap and, if so, that may explain why no native interfaces are found?

Carpy gravatar imageCarpy ( 2018-04-27 14:48:13 +0000 )edit

I tried the following this morning: 1. disconnected my USB-Eth adapter and restarted WS --> no interfaces found 2. uninstalled USBPcap (WinPcap is still installed) and rebooted PC --> no interfaces found So now I'm dead in the water, unable to even use Wireshark at all. I suppose I could remove the latest installation and see if there is an older version that I can install it might work again. I think my previously working version was 2.2.x so there are presumably many builds in between...

Carpy gravatar imageCarpy ( 2018-04-27 15:25:58 +0000 )edit
see more comments