Hello, I am running windows 8.1 and am trying to install wireshark 1.99 but when it gets to the installation of winpcap 4.1.3, after clicking on the install button I get a message saying that an older version of winpcap is running close all programs that are using it and try again.

How do I know which programs are using it, and where did it come from? Is there a way to by-pass this error and get winpcap installed because if I try to run tshark, I get an error saying the npf driver is not running but there is no npf.sys in c:\windows\system32\drivers nor is there an npf service in the services database.

Any help would be greatly appreciated.

asked 01 Mar '15, 02:57

dnraikes's gravatar image

dnraikes
11223
accept rate: 0%


This has been reported a few times, e.g. here.

It's likely that something else has installed it's own version of WinPCap, maybe even under another name. You'll have to track down the offender and stop\remove it. I think Metasploit installs it.

link

answered 01 Mar '15, 04:03

grahamb's gravatar image

grahamb ♦
18.6k328196
accept rate: 22%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×69
×17

Asked: 01 Mar '15, 02:57

Seen: 1,995 times

Last updated: 01 Mar '15, 04:03

p​o​w​e​r​e​d by O​S​Q​A