This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark doesn’t work on Windows 10 build 1511

0

I have recently upgraded Windows 8.1 to Windows 10, and there is problem with Wireshark.

When I run Wireshark as administrator, I can see in task manager that process has started, but that is it. No window, no error message.

I tried to reinstall WinPcap, and Wireshark - nothing changes.

I installed Win10Pcap - nothing.

I installed Ncap - stiil same.

I am running out of ideas. Anyone have some sugestions?

asked 01 Jun '16, 04:40

nickBo's gravatar image

nickBo
6●1●1●5
accept rate: 0%

edited 01 Jun '16, 04:41

One Answer:

1

It works for me on two different machines (Win 8.1) that were upgraded to Win 10.

You can try this:

  1. Uninstall Wireshark. Uninstall WinPcap. Uninstall USBpcap. Uninstall Win10Pcap. Uninstall NCap (what's that, did you mean npcap?).
  2. Reboot.
  3. Check you don't have any pcap detritus, dir %windir%\System32\Drivers\npf.sys.
  4. Reinstall Wireshark, installing WinPcap when given the option.

If there is pcap detritus then something else has installed npf.sys, find out what it is and remove it before installing Wireshark.

It's also entirely possible that other software, e.g. AV, VPN, Endpoint Protection is causing the issue, do you have anything of that sort installed?

answered 01 Jun '16, 04:49

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206
accept rate: 22%

What is pcap detritus?

I have Cisco VPN Client and Dell's Global VPN client installed. I unistalled those, and tried to run wireshark, but nothing changed.

(01 Jun '16, 06:41) nickBo

detritus - left over from installs.

Did you also go through the other uninstalls and reboot as I suggested?

(01 Jun '16, 07:08) grahamb ♦

Just a rough idea, those multiple desktops introduced in Windows 10. Can you run Wireshark like you did, and then click the desktop selection icon next to the "start" and "search" icons in the taskbar and check whether Windows haven't open the Wireshark window on another desktop?

(04 Jun '16, 07:55) sindy