Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

At what stage does Wireshark check which capture library (npf) is installed?

The thing is that I've uninstalled WinPcap and installed npcap in native (as in "not WinPcap-compatible") mode after installing Wireshark, and Wireshark works with it but continues to declare in the help that it uses WinPcap. So does Wireshark only check the library used once during installation, or during the very first start after installation, or not at all?