I have recently installed WireShark and WinPCap. During the install, everything seemed to be fine. During my first launch, I got an error somewhere along the lines of "Child dumpcap closed sync pipe prematurely." I read and read and read to finding no solution. I unistalled everything, re-downloaded the 1.7.1 Developer version of WireShark and downloaded WinPCap version 4.1.2 directly from winpcap.org.
After installing both, I now get no errors, but also have no interfaces like before. When clicking Capture -> Interfaces... I receive the following message, "There are no interfaces on which a capture can be done." I have tried as much as I could to try to get my NICs to appear, but to no avail again.
I tried using WinDump -D and it showed both of my adapters so I'm wondering where the issue lies.
I'm running Windows 7 Ultimate on a NetBook. I believe I have all of the latest updates for drivers and Windows.
Thank you for any information.
As WinDump uses exactly the same capture mechanism as wireshark (and tshark etc.), that is WinPCap, it seems odd that WinDump can display interfaces but Wireshark can't.
There should be no difference between the version of WinPCap installed via the Wireshark installer and that directly from winpcap.org.
Have you tried
answered 09 Apr '12, 08:28
please download the latest version of wireshark which is 2.2.1 and winpcap 4.1.3.
if npf driver is not starting then also interfaces will not be started
To start npf driver :
run cmd in administrator mode
enter code: net start npf. The service will be started and interfaces will be seen.
if not through this start wireshark also in administrator mode
This answer is marked "community wiki".
answered 01 Nov '16, 10:23