TCP traffic is not captured over npcap loopback.

asked 2019-06-07 11:53:57 +0000

pblr gravatar image

I have installed Wireshark 3.0.2. on WIndows 10. I can capture UDP traffic from the npcap loopback adapter but not TCP traffic. I can capture TCP traffic from LAN adapter. Any suggestions?

Pantelis

edit retag flag offensive close merge delete

Comments

Works for me using npcap 0.995. Are you using any capture filters?

grahamb gravatar imagegrahamb ( 2019-06-07 12:10:40 +0000 )edit

No, I do not use any capture filter. In other PC, it works fine for me, as well.

pblr gravatar imagepblr ( 2019-06-07 12:38:18 +0000 )edit

Do you have any VPN or Endpoint AV software installed?

grahamb gravatar imagegrahamb ( 2019-06-07 12:53:11 +0000 )edit

No, I do not have. With the Wireshark 3.0.1 it worked. It has stopped working after installing the version 3.0.2. I have unistalled/reinstalled 3.0.2 and Npcap several times. Also, 3.0.1 again, but still the proble, exist.

pblr gravatar imagepblr ( 2019-06-07 13:39:52 +0000 )edit

You can try this:

  1. Uninstall npcap
  2. Reboot
  3. Check for any remaining npcap loopback adapters, if any are found remove them and reboot again.
  4. Install npcap latest (currently 0.995).
  5. Reboot
grahamb gravatar imagegrahamb ( 2019-06-07 16:07:34 +0000 )edit

And if it still doesn't work, file a bug against npcap as an nmap issue on GitHub.

Guy Harris gravatar imageGuy Harris ( 2019-06-07 20:46:43 +0000 )edit

Problem solved. Apart from unistalling npcap and wireshark, I also removed the npcap driver from the device manager. I used ipconfig to check if the npcap driver is active or not. Then, reboot and re-installation of wireshark. Thank you for your help.

pblr gravatar imagepblr ( 2019-06-13 14:35:49 +0000 )edit