"The capture session could not be initiated ... (Error calling PacketGetTimestampModes: ... (1))." error when capturing
When I try start capture packets on any interface, I get the following error:
The capture session could not be initiated on interface '\Device\NPF_{6F511CC4-F0C1-481B-9C86-227FF3DB091D}' (Error calling PacketGetTimestampModes: Incorrect function. (1)). please check you have the proper interface or pipe specified
Why is this happen and how can I fix this?
I'm running wireshark as administrator, and using wireshark Version 3.4.6 (v3.4.6-0-g6357ac1405b8) Running on windows 10 build 19042.985
wireshark -v
orHelp -> About Wireshark: Wireshark
will show if you're runningwinpcap
ornpcap
, and the version....and that information may be necessary to determine the cause of the problem.
Do NOT run Wireshark as Administrator, it's unnecessary* and possibly dangerous to your system. Wireshark contains millions of lines of community contributed code that you are exposing to all the network traffic you capture.
* Unless you have mistakenly checked the npcap install option to require administrator, and if you have done that, then you should reinstall npcap and uncheck that option.