Ask Your Question
0

Trouble with running Wireshark (Promiscuous mode)

asked 2023-11-03 17:08:21 +0000

Joep de Goeij gravatar image

updated 2023-11-05 11:16:59 +0000

Jaap gravatar image

Hi here i am again with a question. When i try to run WireShark on my Computer (windows 11). It wont work there will come a notification that sounds like this.

The capture session could not be initiated on capture device "\Device\NPF_{62432944-E257-41B7-A71A-D374A85E95DA}". (failed to set hardware filter to promiscuous mode: A device attached to the system is not functioning. (31))

please turn of promiscuous mode on your device.

Can someone please explain to me how i put this promiscuous mode off, and why this is happening? I used WireShark just fine on my dads computer, so i realy wonder why i got these issues.

edit retag flag offensive close merge delete

Comments

Please provide "Wireshark: Help -> About Wireshark -> Copy to Clipboard" information.

cmaynard gravatar imagecmaynard ( 2023-11-03 19:03:09 +0000 )edit
add a comment

1 Answer

Sort by ยป oldest newest most voted
0

answered 2023-11-03 20:51:30 +0000

Jaap gravatar image

If you search for this you probably will run into suggestions to update npcap to 1.73 or above.

edit flag offensive delete link more

Comments

1.74 contains the real fix (1.73 contains a change from somebody named "Guy Harris" that fixed a problem that said somebody thought might be the problem, and may have been a potential problem, but the main problem was somewhere else).

But 1.74 breaks time stamping; that's fixed in 1.75.

So I'd say "1.75 or above" now, and, given what's in the Npcap change log, I'd recommend 1.78 (not 1.76 or 1.77; those had memory-leak issues, at least one of which showed up in Wireshark's main screen with the interface traffic sparklines).

Guy Harris gravatar imageGuy Harris ( 2023-11-03 23:40:42 +0000 )edit

:)

npcap is a bit of a moving target. Keep an eye on the release notes if problems are seen.

Jaap gravatar imageJaap ( 2023-11-04 21:48:05 +0000 )edit

And because of these npcap issues, the version installed by Wireshark tends to lag behind a bit until we find another npcap version that works well.

grahamb gravatar imagegrahamb ( 2023-11-05 14:25:34 +0000 )edit

Hi all

I want to thank you all for the great feedback!

Joep de Goeij gravatar imageJoep de Goeij ( 2023-11-06 19:32:58 +0000 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2023-11-03 17:08:21 +0000

Seen: 404 times

Last updated: Nov 06 '23