Ask Your Question

"The capture session could not be initiated ... (Error calling PacketGetTimestampModes: ... (1))." error when capturing

asked 2021-06-10 23:39:06 +0000

YRYRYR gravatar image

updated 2021-11-07 20:27:51 +0000

Guy Harris gravatar image

When I try start capture packets on any interface, I get the following error:

The capture session could not be initiated on interface '\Device\NPF_{6F511CC4-F0C1-481B-9C86-227FF3DB091D}' (Error calling PacketGetTimestampModes: Incorrect function. (1)). please check you have the proper interface or pipe specified

Why is this happen and how can I fix this?

I'm running wireshark as administrator, and using wireshark Version 3.4.6 (v3.4.6-0-g6357ac1405b8) Running on windows 10 build 19042.985

edit retag flag offensive close merge delete


wireshark -v or Help -> About Wireshark: Wireshark will show if you're running winpcap or npcap, and the version.

Chuckc gravatar imageChuckc ( 2021-06-11 00:25:52 +0000 )edit

wireshark -v or Help -> About Wireshark: Wireshark will show if you're running winpcap or npcap, and the version.

...and that information may be necessary to determine the cause of the problem.

Guy Harris gravatar imageGuy Harris ( 2021-06-11 02:26:35 +0000 )edit

Do NOT run Wireshark as Administrator, it's unnecessary* and possibly dangerous to your system. Wireshark contains millions of lines of community contributed code that you are exposing to all the network traffic you capture.

* Unless you have mistakenly checked the npcap install option to require administrator, and if you have done that, then you should reinstall npcap and uncheck that option.

grahamb gravatar imagegrahamb ( 2021-06-11 07:35:20 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2021-11-07 20:27:17 +0000

Guy Harris gravatar image

This is probably a result of Wireshark using Npcap libraries but the driver being used by the Npcap libraries either being an older Npcap driver or even a WinPcap driver, i.e. mismatched software being installed.

Try un-installing WinPcap (if it's installed) and Npcap, and then try downloading and installing the latest version of Npcap from

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2021-06-10 23:39:06 +0000

Seen: 3,172 times

Last updated: Nov 07 '21