This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Possible to disable the scan portion of wireshark

0

Is it possible to install Wireshark only to read PCAP files. Our management doesn't want any network scanner software available to anyone on the network. We get sent pcap files when there is an issue for our dns poduct users and can't process them. I'm trying to justify having wireshark on my system, for local use only!!!

asked 25 Mar '13, 05:24

rolsen's gravatar image

rolsen
6113
accept rate: 0%


One Answer:

2

On Windows you could install Wireshark without running the WinPCAP installer. That way Wireshark would not get access to network cards for capturing data when started.

answered 25 Mar '13, 05:27

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

This is exactly what i was believing would work. THANKS.

(25 Mar '13, 05:45) rolsen