This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

The NPF driver isn’t running. You may have trouble

0

I am getting this message even though I attempted to install WinPcap with Wireshark. The install program tells me WinPcap is already running but how can that be? I've never installed this program before today. Also, program manager doesn't find any instances of it running. I cannot capture any calls until I get this resolved. Please help.

asked 01 Aug '14, 14:14

Brian's gravatar image

Brian
11112
accept rate: 0%


One Answer:

0
  1. There are programs and services, NPF is a service
  2. WinPcap / NPF is used by other programs as well, might have already come in that way
  3. WinPcap 'already running' is probably 'already installed', as found through registry keys

To find NPF go to your services control panel and look for it there. It also shows its running state, and if it is started at boot time.

Start the service launch Wireshark again and see.

answered 02 Aug '14, 06:31

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Also see the answers to this question, possibly the most viewed on the site.

(02 Aug '14, 07:19) grahamb ♦

npf is not in my service list

(16 Sep '14, 13:38) richards