This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am getting this message even though I attempted to install WinPcap with Wireshark. The install program tells me WinPcap is already running but how can that be? I've never installed this program before today. Also, program manager doesn't find any instances of it running. I cannot capture any calls until I get this resolved. Please help.

asked 01 Aug '14, 14:14

Brian's gravatar image

Brian
11112
accept rate: 0%


  1. There are programs and services, NPF is a service
  2. WinPcap / NPF is used by other programs as well, might have already come in that way
  3. WinPcap 'already running' is probably 'already installed', as found through registry keys

To find NPF go to your services control panel and look for it there. It also shows its running state, and if it is started at boot time.

Start the service launch Wireshark again and see.

permanent link

answered 02 Aug '14, 06:31

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Also see the answers to this question, possibly the most viewed on the site.

(02 Aug '14, 07:19) grahamb ♦

npf is not in my service list

(16 Sep '14, 13:38) richards
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×19
×4

question asked: 01 Aug '14, 14:14

question was seen: 6,131 times

last updated: 16 Sep '14, 14:39

p​o​w​e​r​e​d by O​S​Q​A