Hello, we have a program that uses Wireshark. It stopped working with Wireshark v. 4.x.x. We must keep it with the latest version before Wireshark 4.x.x.
The problem is that whenever we downgrade the Wireshark to v 3.6.9, the system upgrades it to the latest v 4.x.x. What to do? We changed gui.update.enabled to FALSE, but it continues updating it.
Can someone help?
Thank you.
To the best of my knowledge Wireshark will only recommend an update but NOT perform an autoupdate itself. So I guess that is some customization that you have added yourself or is in some form enforced by a policy.
Not anymore. It started updating. We have multiple users and multiple workstations with the same issue. You can try to downgrade it to the latest v 3.x.x. In a day or two, it will upgrade to the latest v 4.x.x.
We do not do any customization to Wireshark. We use all defaults when we install it.
@hugo.vanderkooij. Can you please unmark it as an answer? This is NOT an answer to my question.
How can it be the answer? He said that auto update does not happen when it happens. We have it on multiple workstations. Basically, every time we have to use Wireshark with our tools, we have to downgrade it.
You replied here and told us that you have the same issue.
There is an auto update now and I need to disable it. It started with v 4. We did not have this issue before this new version.
@igork, for me this problem started well before version 4.0 (I don't recall exactly when), but as @hugovanderkooij indicated, Wireshark itself doesn't auto-update and there's nothing in the source code that leads me to believe otherwise. I don't know why this happens, but of course I'd love to find out why and put an end to it.
But, as stated in the Help section, This site is for asking and answering questions, not for open-ended discussions., so this Q/A site isn't really the place to discuss the problem and try to determine a solution. If you'd like to discuss it further, I might suggest that you visit the Wireshark Discord Server or perhaps the Wireshark Users Mailing List, reddit, facebook, libera.chat (#wireshark), or other such forums and message boards. Oh, and if you ever need help on April 1st, be ...
I've finally gotten to the bottom of why this happens, at least in my case, but I suspect a similar situation is affecting you as well.
Basically, my company employs a tool that automatically updates a bunch of software, and Wireshark is included in the list of software that gets automatically updated. This is fine for a stock Wireshark installation, but not for a customized Wireshark installation. I am currently trying to work with our IT team to devise a solution to avoid having the customized version of Wireshark automatically updated. You will surely need to do the same if this is indeed the same thing that's happening in your case.
Asked: 2022-11-08 01:06:55 +0000
Seen: 715 times
Last updated: Jul 19 '23
Please add the output of
wireshark -vorHelp->About Wireshark:Wiresharkto the question.Here it is:
(more)This has actually been happening to us for some time as well; however I create a custom Wireshark installer and thought maybe it was something stupid I was doing to cause this because I had never heard anyone else report this problem. Our custom installer actually checks for updates against the version of Wireshark on our own server, not against the latest off-the-shelf version and yet out of the blue, we will find that our custom version of Wireshark has been replaced with the latest off-the-shelf version. It's maddening.
It's almost certainly something else causing this to happen and not Wireshark itself, but what that something is, I have no idea.
Is it a mix of OS versions or just one particular release?
Shouldn't there be Windows events that could help to diagnose this?
I use Windows 11 workstation. I am not sure about other people, but I am sure that most of them have Windows 11 and very few people have Windows 10.
I am not sure what Windows event would tell me and how to find an event related to Wireshark update.
Somehow the incorrect reply was marked as an answer. How can I remove it? This is not an answer.
I do not think that there is something else can cause this auto update. My workstation has an Office, MS Teams, and Power Bi. Nothing else.
Does your company deploy Zscalar by any chance?
No, we do not have Zscaler.
Likely a duplicate question for reference: https://ask.wireshark.org/question/30...
Has your company purchased Npcap OEM?
No, we did not.