Hello, I am running windows 8.1 and am trying to install wireshark 1.99 but when it gets to the installation of winpcap 4.1.3, after clicking on the install button I get a message saying that an older version of winpcap is running close all programs that are using it and try again.
How do I know which programs are using it, and where did it come from? Is there a way to by-pass this error and get winpcap installed because if I try to run tshark, I get an error saying the npf driver is not running but there is no npf.sys in c:\windows\system32\drivers nor is there an npf service in the services database.
Any help would be greatly appreciated.
asked 01 Mar '15, 02:57
This has been reported a few times, e.g. here.
It's likely that something else has installed it's own version of WinPCap, maybe even under another name. You'll have to track down the offender and stop\remove it. I think Metasploit installs it.
answered 01 Mar '15, 04:03