This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

What is the meaning of this error?

0
"\Device\NPF_{12D8C25E-1599-4276-A1DD-C37CE0539DE8}" is the proper interface.

What does this mean?

This question is marked "community wiki".

asked 06 Aug '12, 13:19

RadioRebel's gravatar image

RadioRebel
1●1●1●1
accept rate: 0%

edited 06 Aug '12, 13:55

multipleinterfaces's gravatar image

multipleinte...
1.3k●15●23●40

One Answer:

0

That information is displayed by dumpcap, if you specify the wrong interface for option -i. The full error message is this:

Please check that "\Device\NPF_{12D8C25E-1599-4276-A1DD-C37CE0539DE8}" is the proper interface.

Please double check, that the given interface is among those listed with

dumpcap -D -M

You can use the interface number (also listed by dumpcap -D -M), instead of the device specifier, like this:

dumpcap -n -i 3

Regards
Kurt

answered 06 Aug '12, 14:37

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

And the full full error message would also include

The capture session could not be initiated (XXX).

with some XXX message giving the reason why WinPcap (as used by Wireshark) couldn't open \Device\NPF_{12D8C25E-1599-4276-A1DD-C37CE0539DE8}.

If you didn't see all of that, there's a bug.

(06 Aug '12, 19:12) Guy Harris ♦♦