This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

Windows 8 64b, Wireshark 1.8.5

  • instalation OK

Cisco AnnyConnect Secure mobility client VPN - not visible adapter -> nothing captured in this VPN

Can you help me? Or can some new version of Wireshark, compatible with win8, help me?

Pavel

asked 04 Mar '13, 04:57

kailer's gravatar image

kailer
6113
accept rate: 0%


More a WinPCap issue than Wireshark. I haven't any experience with this VPN client but it's likely that WinPCap can't use this interface, especially as you say it doesn't show up.

Try Network Monitor (NM) from Microsoft, Wireshark can read captures made by NM.

permanent link

answered 04 Mar '13, 05:27

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

Thank you very much. You are right.

The best solution is the new WinPCap 4.1.3 now. It is compatible with Windows 8 and work fine with Cisco client.

bye

(11 Mar '13, 03:14) kailer

The 'problem' with the AnyConnect virtual adapter is, that it is disabled until you established a vpn tunnel. I guess that WinPcap is unable to see the adapter as it was disabled when the WinPcap NPF service was started, at least some tests let me assume this. So here is what you can try:

  • establish a VPN tunnel
  • stop Wireshark
  • stop WinPcap NPF service: sc stop npf (in an elevated DOS box - run DOS box as Administrator!!)
  • start WinPcap NPF service: sc start npf
  • start Wireshark

If you don't see the AnyConnect adapter now, WinPcap does not support that type of virtual interfaces and you are out of luck. Please use Microsoft Network Monitor, as @grahamb suggested.

Regards
Kurt

permanent link

answered 05 Mar '13, 11:31

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×43
×1

question asked: 04 Mar '13, 04:57

question was seen: 11,846 times

last updated: 11 Mar '13, 11:45

p​o​w​e​r​e​d by O​S​Q​A