This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

In trying to track down HTTP protocol errors, we installed Wireshark on 3 Windows 2008 R2 servers. Prior to installing Wireshark, specific HTTP traffic would fail. Immediately upon installing Wireshark, the problematic HTTP traffic worked as expected. Even after uninstalling Wireshark, the initially problematic HTTP traffic continued to work.

I'm wondering if the Wireshark installation makes changes to the IP stack or any existing .dlls. I'd like to compare against the 2008 R2 servers that continue to have HTTP issues. It could just be a coincidence, but I want to confirm.

asked 08 May '13, 14:53

jbright's gravatar image

jbright
1111
accept rate: 0%

edited 08 May '13, 17:27

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196

HTTP protocol errors,
specific HTTP traffic would fail.

what is the nature of those protocol errors and what kind of HTTP traffic failed (how did it fail)?

(08 May '13, 17:42) Kurt Knochner ♦

The Windows Wireshark installer runs the WinPcap installer; WinPcap installs a transport driver (which shouldn't affect other parts of the networking stack) and its own DLLs, but doesn't modify any existing DLLs. Wireshark itself does nothing to the networking stack or any system DLLs.

When you uninstalled Wireshark, did you also uninstall WinPcap? (Check whether "WinPcap 4.1.2" is installed.)

Perhaps something about WinPcap is making the problem go away. You could try downloading and installing WinPcap on the servers that are still having issues.

permanent link

answered 08 May '13, 17:26

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

I uninstalled both Wireshark and WinPcap, so in theory, if either of those magically resolved the issue, the issue would return once they were uninstalled.

(09 May '13, 08:37) jbright
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×178
×7
×1

question asked: 08 May '13, 14:53

question was seen: 2,070 times

last updated: 09 May '13, 09:19

p​o​w​e​r​e​d by O​S​Q​A