wireshark cant start capturing

asked 2021-06-10 23:39:06 +0000

YRYRYR gravatar image

updated 2021-06-10 23:58:10 +0000

When I try start capture packets on any interface, I get the following error:

The capture session could not be initiated on interface '\Device\NPF_{6F511CC4-F0C1-481B-9C86-227FF3DB091D}' (Error calling PacketGetTimestampModes: Incorrect function. (1)). please check you have the proper interface or pipe specified

Why is this happen and how can I fix this?

I'm running wireshark as administrator, and using wireshark Version 3.4.6 (v3.4.6-0-g6357ac1405b8) Running on windows 10 build 19042.985

edit retag flag offensive close merge delete

Comments

wireshark -v or Help -> About Wireshark: Wireshark will show if you're running winpcap or npcap, and the version.

Chuckc gravatar imageChuckc ( 2021-06-11 00:25:52 +0000 )edit

wireshark -v or Help -> About Wireshark: Wireshark will show if you're running winpcap or npcap, and the version.

...and that information may be necessary to determine the cause of the problem.

Guy Harris gravatar imageGuy Harris ( 2021-06-11 02:26:35 +0000 )edit

Do NOT run Wireshark as Administrator, it's unnecessary* and possibly dangerous to your system. Wireshark contains millions of lines of community contributed code that you are exposing to all the network traffic you capture.

* Unless you have mistakenly checked the npcap install option to require administrator, and if you have done that, then you should reinstall npcap and uncheck that option.

grahamb gravatar imagegrahamb ( 2021-06-11 07:35:20 +0000 )edit