This is our old Q&A Site. Please post any new questions and answers at

Hello, I am running windows 8.1 and am trying to install wireshark 1.99 but when it gets to the installation of winpcap 4.1.3, after clicking on the install button I get a message saying that an older version of winpcap is running close all programs that are using it and try again.

How do I know which programs are using it, and where did it come from? Is there a way to by-pass this error and get winpcap installed because if I try to run tshark, I get an error saying the npf driver is not running but there is no npf.sys in c:\windows\system32\drivers nor is there an npf service in the services database.

Any help would be greatly appreciated.

asked 01 Mar '15, 02:57

dnraikes's gravatar image

accept rate: 0%

This has been reported a few times, e.g. here.

It's likely that something else has installed it's own version of WinPCap, maybe even under another name. You'll have to track down the offender and stop\remove it. I think Metasploit installs it.

permanent link

answered 01 Mar '15, 04:03

grahamb's gravatar image

grahamb ♦
accept rate: 22%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 01 Mar '15, 02:57

question was seen: 3,439 times

last updated: 01 Mar '15, 04:03

p​o​w​e​r​e​d by O​S​Q​A