This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

capture setup for WLAN (IEEE 802.11) device

0

Hello Everybody,

I recently installed Wireshark, when I open wireshark it shows "No interface found" while I have a TP-LINK's TL-WN823N(USB wireless adapter) connected.

How do I setup or add the interface to the wireshark interface list. Help is greatly appreciated :)

asked 30 Oct '16, 09:33

wireshark_abdular7's gravatar image

wireshark_ab...
1113
accept rate: 0%

What operating system are you running Wireshark on?

(30 Oct '16, 14:13) Guy Harris ♦♦

Windows7 32bit

(31 Oct '16, 00:07) wireshark_ab...
1

What does the Help -> About window in Wireshark report? (Please copy and paste the text, rather than trying to post a screenshot.)

(31 Oct '16, 00:22) Guy Harris ♦♦

Version 2.2.1 (v2.2.1-0-ga6fbd27 from master-2.2)

Copyright 1998-2016 Gerald Combs [email protected] and contributors. License GPLv2+: GNU GPL version 2 or later http://www.gnu.org/licenses/old-licenses/gpl-2.0.html This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.23, with Cairo 1.10.2, with Pango 1.34.0, with WinPcap (4_1_3), with GLib 2.38.0, with zlib 1.2.8, with SMI 0.4.8, with c-ares 1.12.0, with Lua 5.2.4, with GnuTLS 3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built Oct 4 2016), with AirPcap.

Running on 32-bit Windows 7, build 7600, with locale English_United States.1252, with WinPcap version 4.1.3 (packet.dll version 0.10 r12), based on libpcap version 1.0 branch 1_0_rel0b (20091008), with GnuTLS 3.2.15, with Gcrypt 1.6.2, without AirPcap. Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz (with SSE4.2), with 3240MB of physical memory.

Built using Microsoft Visual C++ 12.0 build 40629

Wireshark is Open Source Software released under the GNU General Public License.

Check the man page and http://www.wireshark.org for more information.

(31 Oct '16, 00:43) wireshark_ab...

I executed the command C:\Windows\system32>sc start npf

and it returned me(text below)

[SC] StartService FAILED 31:

A device attached to the system is not functioning.

(31 Oct '16, 00:45) wireshark_ab...

Was the USB adapter plugged into the machine at the time it was booted? If not, what happens if you reboot the machine while it's plugged in and then try to run Wireshark?

(31 Oct '16, 01:08) Guy Harris ♦♦

Yes Harris...adapter was connected! rebooting is not fixing the issue :(

(31 Oct '16, 07:29) wireshark_ab...
showing 5 of 7 show 2 more comments

3 Answers:

1

Suggest to start here

https://wiki.wireshark.org/CaptureSetup/WLAN

Depends on os and many other factors. Reboot, as well.

answered 30 Oct '16, 10:52

Bob%20Jones's gravatar image

Bob Jones
1.0k2515
accept rate: 21%

1

with WinPcap version 4.1.3 (packet.dll version 0.10 r12), based on libpcap version 1.0 branch 1_0_rel0b (20091008)

This indicates that you are using a very old version Npcap's wpcap.dll and the latest version (0.10 r12) Npcap's Packet.dll. I can't tell what's the driver's version. In another word, your Npcap installation is broken. A possible cause is that you uninstalled Npcap with Wireshark still opened. So an old wpcap.dll is still in use by Wireshark and not deleted.

I suggest you close all Wireshark windows. And reinstall Npcap's latest version again, if there's still issue, then send the DiagReport to: https://github.com/nmap/nmap/issues

answered 31 Oct '16, 18:46

Yang%20Luo's gravatar image

Yang Luo
9117
accept rate: 4%

0

Running on 32-bit Windows 7, build 7600, with locale English_United States.1252, with WinPcap version 4.1.3 (packet.dll version 0.10 r12), based on libpcap version 1.0 branch 1_0_rel0b (20091008)

You seem to be running npcap which is currently considered experimental for use with Wireshark. npcap may have been installed directly by yourself, or as part of another installation e.g. nmap beta.

If you wish to continue with npcap, you'll need to get support via the npcap Github issues page.

If you don't require npcap, please uninstall it, reboot, and re-install Wireshark allowing it to install WinPcap 4.1.3, and then post back here with the result.

answered 31 Oct '16, 03:58

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

So what indicates that it's Npcap? It says it's "libpcap version 1.0", which sounds more like WinPcap (based on an older libpcap) than Npcap (based on a more recent libpcap).

(31 Oct '16, 14:22) Guy Harris ♦♦
packet.dll version 0.10 r12
(01 Nov '16, 04:54) grahamb ♦