I am using Windows 7 64bit edition; when i first installed Wireshark it worked, but after restart its constantly telling me NPF driver is not running error and therefore I cannot see any of my network cards. Please help
I am using Wireshark on the 64-bit edition of Windows 7 without problem.
The npf driver is not visible in your regular "Computer Management" WMI-interface. The npf status is best checked with the command line.
Run a cmd.exe as administrator and run the command sc qc npf.
You should get some output like this:
If your driver is not properly started, activate it with the command sc start npf
Finally, to start the service automatically, use the command sc config npf start=auto
Remember to run your cmd.exe as administrator when issuing these command.
answered 08 Dec '10, 01:26
Find the file called npf.sys which is located at
in Windows 7. Then make sure that you have installed winpcap, if you didn't install it, just go to its official site and download it for installation: http://www.winpcap.org
Next, find cmd.exe which is located at
in Windows 7, right click and "Run as administrator". When it opened, input net start npf, then the NPF driver is successfully opened. That is,the file npf.sys is opened.
At last, restart Wireshark, it will be OK now.
BTW, if you have other driver problems or want to update, backup or restore drivers, the free program DriveTheLife (official site: http://www.drivethelife.com) is a perfect one.
This answer is marked "community wiki".
answered 23 Dec '14, 22:25
Just run the shark under administrator and it will work as well.
answered 04 Aug '11, 00:44