Ask Your Question
0

"The capture session could not be initiated ... (Error calling PacketGetTimestampModes: ... (1))." error when capturing

asked 2021-06-10 23:39:06 +0000

YRYRYR gravatar image

updated 2021-11-07 20:27:51 +0000

Guy Harris gravatar image

When I try start capture packets on any interface, I get the following error:

The capture session could not be initiated on interface '\Device\NPF_{6F511CC4-F0C1-481B-9C86-227FF3DB091D}' (Error calling PacketGetTimestampModes: Incorrect function. (1)). please check you have the proper interface or pipe specified

Why is this happen and how can I fix this?

I'm running wireshark as administrator, and using wireshark Version 3.4.6 (v3.4.6-0-g6357ac1405b8) Running on windows 10 build 19042.985

edit retag flag offensive close merge delete

Comments

wireshark -v or Help -> About Wireshark: Wireshark will show if you're running winpcap or npcap, and the version.

Chuckc gravatar imageChuckc ( 2021-06-11 00:25:52 +0000 )edit

wireshark -v or Help -> About Wireshark: Wireshark will show if you're running winpcap or npcap, and the version.

...and that information may be necessary to determine the cause of the problem.

Guy Harris gravatar imageGuy Harris ( 2021-06-11 02:26:35 +0000 )edit

Do NOT run Wireshark as Administrator, it's unnecessary* and possibly dangerous to your system. Wireshark contains millions of lines of community contributed code that you are exposing to all the network traffic you capture.

* Unless you have mistakenly checked the npcap install option to require administrator, and if you have done that, then you should reinstall npcap and uncheck that option.

grahamb gravatar imagegrahamb ( 2021-06-11 07:35:20 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2021-11-07 20:27:17 +0000

Guy Harris gravatar image

This is probably a result of Wireshark using Npcap libraries but the driver being used by the Npcap libraries either being an older Npcap driver or even a WinPcap driver, i.e. mismatched software being installed.

Try un-installing WinPcap (if it's installed) and Npcap, and then try downloading and installing the latest version of Npcap from https://npcap.org/.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-06-10 23:39:06 +0000

Seen: 3,290 times

Last updated: Nov 07 '21