disable interface discovery

asked 2018-08-03 08:47:32 +0000

My setup consists of win7, wireshark 2.6.2, npcap 0.99 and 13 network interfaces thanks to various vpn solutions.

Now when I start up Wireshark even if I just want to open a pcap capture file I get the uac elevation dialog for all network interfaces with a short wait inbetween.

Ist there a way to disable the inerface discovery step wireshark does, or at least limit it to a known set of interface identifiers?

edit retag flag offensive close merge delete


I'm not aware of such an option. Enumerating the interfaces is run through the capture library, in your case npcap, can you rule out an npcap issue by uninstalling it and installing WinPcap?

grahamb gravatar imagegrahamb ( 2018-08-03 09:44:26 +0000 )edit

npcap itself is working fine, and the enumeration also works as expected my question is about not doing it at all, ie. when opening an existing package capture file

OloEopia gravatar imageOloEopia ( 2018-08-03 11:41:59 +0000 )edit

I don't think a UAC elevation is normal, I've never seen that before, that's what I thought your issue wa

Currently, the only way to stop Wireshark asking the capture library to enumerate all the interfaces (so Wireshark can display them along with the traffic sparklines) is to not have a capture library.

To change this behaviour would require the addition of a command line switch or preference, so an enhancement request should be raised on the Wireshark Bugzilla.

grahamb gravatar imagegrahamb ( 2018-08-03 14:28:48 +0000 )edit