This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

no interfaces found …

0

I do not have enough "karma" to upload files, so no screenshots, sorry....

I was running wireshark fine with NPCAP just a week ago. This morning starting it as administrator it shows no interfaces to be selected for capture.

I Uninstalled it. Made sure every program data/program files forlder where removed, rebooted, reinstalled ( it detected npcap during install), rebooted, started as administrator... Same problem.

If I use rawcap I can see these interfaces:

0.     169.254.39.183  vEthernet (Internal Switch)     Ethernet
1.     192.168.6.52    vEthernet (commutateur virtuel 1)       Ethernet
2.     169.254.110.185 Npcap Loopback Adapter  Ethernet
3.     192.168.56.1    VirtualBox Host-Only Network    Ethernet
4.     127.0.0.1       Loopback Pseudo-Interface 1     Loopback

I'm using windows 8.1 64 bits and wireshark 2.0.2 for win64.

Any idea, so far i'm simply using rawcap to save to a file I open with wireshark, but it is annoying.


Trying to build on the first answer. I uninstalled NPCAP, then removed the driver service as follows:

    pnputil -e
...
Published name :            oem12.inf
Driver package provider :   Nmap Project
Class :                     Network Service
Driver date and version :   02/24/2016 23.40.33.73
Signer name :               Insecure.Com LLC
...

pnputil -d oem12.inf

I had to remove two of them oem12.inf and oem16.inf from Insecure.Com LLC. Then I rebooted, ran iterativelly CCLeaner just to get rid of some registry keys in any case then reinstalled the latest version of NPCAP as admin.

===> It “fails to install driver service”…

asked 11 Mar ‘16, 01:05

rapha's gravatar image

rapha
6114
accept rate: 0%

edited 11 Mar ‘16, 04:55


2 Answers:

1

The enumeration of interfaces isn't handled by Wireshark at all, rather the capture mechanism, which in your case is npcap or WinPcap, so reinstalling Wireshark isn't likely to help.

Presumably you're using npcap as you wish to capture on the loopback interface. If not, you might better off using WinPcap at the moment.

Which version of npcap are you using? Try uninstalling npcap, reboot, check for traces, e.g. %WINDIR%\System32\Drivers\npcap.sys or npf,sys, and then reinstall.

answered 11 Mar '16, 02:27

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

Thanks, I'm indeed debugging a client server program locally this is why I need the loopback. I edited my question.

(11 Mar '16, 04:56) rapha

There have been some ongoing issues for some when installing npcap which haven't yet been resolved. A more appropriate forum for npcap issues would be the nmap dev mailing list.

(11 Mar '16, 05:33) grahamb ♦

thanks, I'll check there. So far, I have my workaround with rawcap.

(14 Mar '16, 01:26) rapha

0

Hi.

Please try the latest Npcap 0.06 R10 here: https://github.com/nmap/npcap/releases

Don't change options if you don't know what they mean.

Let me know if there're any issues.

answered 18 Mar '16, 18:02

Yang%20Luo's gravatar image

Yang Luo
9117
accept rate: 4%