No interfaces shown
Installed Wireshark just an hour ago, so I'm really ignorant. Before I can capture traffic I need to select one or more interfaces, right? But when I select Capture / Options from the menu bar, a) no interfaces are shown, and in fact b) I'm pretty sure I'm looking at the wrong window. It's labeled "Wireshark - Capture Interfaces", alright. But the documentation leads me to expect a list with two icons plus columns headed Description, IP, Packets, Packets/s, whereas the column headers I see are Interface, Traffic, Link-Layer Header, Promiscuous, Snaplen (B), Buffer (MB), Monitor Mode, Capture Filter.
Version 3.0.0 (v3.0.0-0-g937e33de)
Copyright 1998-2019 Gerald Combs <[email protected]> and contributors. License GPLv2+: GNU GPL version 2 or later <http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (32-bit) with Qt 5.12.1, with WinPcap SDK (WpdPack) 4.1.2, with GLib 2.52.2, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.14.0, with Lua 5.2.4, with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos, with MaxMind DB resolver, with nghttp2 1.14.0, with LZ4, with Snappy, with libxml2 2.9.9, with QtMultimedia, with AirPcap, with SBC, with SpanDSP, with bcg729.
Running on 64-bit Windows 7 Service Pack 1, build 7601, with Intel(R) Core(TM) i3-2328M CPU @ 2.20GHz (with SSE4.2), with 5721 MB of physical memory, with locale English_United States.1252, with Npcap version 0.99-r9, based on libpcap version 1.8.1, with GnuTLS 3.6.3, with Gcrypt 1.8.3, without AirPcap, binary plugins supported (14 loaded).
Built using Microsoft Visual Studio 2017 (VC++ 14.12, build 25835).
That dialog is one way to list interfaces, the interfaces should also be listed front and centre on the "main" page under the capture filter edit box, unfortunately an image of this isn't provided in the users guide.
The dialog reference in the user's guide is sorely out of date, what you describe is what you should see, are there any interfaces listed in the dialog?
No, nothing shown "front and center", either—in fact the main window says "No interfaces found". The documentation claims this should mean I don't have WinPCap or NPCap installed. It's true I left WinPCap out of the installation process; I don't remember why, but when I look it up I see the publishers deprecate it, saying NPCap is better. My Windows Control Panel claims I have NPCap, and as you see in my original question Wireshark acknowledges its presence.
So am I doomed? Will Wireshark, for unknown reasons, forever be useless to me? I saw a vendor use it on a mysterious problem for one of my clients, and it was magically revealing; I hoped I could use it to explain what's going wrong with my email client/server exchanges. But if Wireshark won't capture traffic for me, and no one can guess why...<sigh> ...(more)
There have been a few reports of failures to display interfaces since we switched to npcap, for unknown reasons.
Best I can offer at the moment is: