This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Remove WinCap from the Install pack

0

Hi,

Is there any way to have an install package for WireShark that don't deploy the WinCap (without the option to install WinCap?)

I will not give the option to capture the traffic since I will provide the traffic packages to my team. I will not relly then to uninstall the WinCap after deploy the WireShark.

Is that possible? To remove WinCap option from the install package?

asked 01 Mar '13, 04:03

Bonacordi's gravatar image

Bonacordi
6●2●2●5
accept rate: 0%

2 Answers:

2

As @Jaap says, you can make your own installer. However, I don't really see the point. I see two possible install scenario's

  • The user is allowed to install software. Then there is nothing keeping the user from installing another version of wireshark with WinPcap included (or install WinPcap separately).
  • The user is not allowed to install software. In this case you do the installing and you can skip the installation of WinPcap during the installation process (I'm no windows admin, but I guess you can even automate this around the vanilla installer).

How do you see the use case for an installer without WinPcap included?

answered 01 Mar '13, 09:18

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k●9●57●245
accept rate: 20%

How do you see the use case for an installer without WinPcap included?

as part of an analysis system/package (together with other software) where Wireshark is only used to look at capture files and there is no need to capture traffic. If you want to roll out that package automatically, you would need a way to prevent the installation of Winpcap. But then, the OP could just use the portable version of Wireshark, extract it, remove WinPcap from the package and repackage it.

(01 Mar '13, 09:25) Kurt Knochner ♦
1

Oh, I do understand the use-case for not having WinPcap installed, but I think the current installer has hooks to not install WinPcap in an automated environment:

From packaging/nsis/wireshark.nsi:

; if running as a silent installer, don't try to install winpcap
IfSilent SecRequired_skip_Winpcap

And from http://nsis.sourceforge.net/Docs/Chapter4.html#4.12:

There are several methods to make an installer or an uninstaller silent:

There are several methods to make an installer or an uninstaller silent:

    SilentInstall and SilentUninstall
    SetSilent
    Passing /S on the command line (case sensitive)

So starting the installer with /S should do the trick :-)

(01 Mar '13, 09:38) SYN-bit ♦♦

So starting the installer with /S should do the trick :-)

there you have it. Problem solved! :-)

(01 Mar '13, 09:51) Kurt Knochner ♦

Thanks Guys... It was exaclty what I was looking for.

(01 Mar '13, 10:04) Bonacordi

(I converted your "answer" to a "comment", that's the way this site works best, please see the FAQ)

(01 Mar '13, 10:10) SYN-bit ♦♦

1

In order to do so you'll have to roll your own installer.

answered 01 Mar '13, 05:36

Jaap's gravatar image

Jaap ♦
11.7k●16●101
accept rate: 14%

Any hint or tutorial about how to do that?

(01 Mar '13, 08:00) Bonacordi