I'm running the latest version of Wireshark on Windows 7 Home Premium 64 bit and 3 of the 5 capture interfaces are called "Microsoft" Where are these names pulled from? Why do they not show the actual card name? Only the LAN port shows correctly as "Realtek RTL8168D"
asked 02 Nov '10, 13:49
I guess Wireshark pulls the card names from the drivers by asking them what the name of their device is. Obviously the OS often reports "Microsoft" for some of them instead of the vendor designation (at least on Win7), in my case for the WiFi card (it's a Dell card actually) and for another virtual adapter. What I usually do is connect only with one of my cards, check the interface list to see where packets are counting up and then give the card a more specific name in Preferences/Capture/Interfaces/Edit to avoid confusion.
answered 03 Nov '10, 00:54
The Wireshark Capture Interfaces window shows the IP addresses of the interfaces - that should tell you which interface is which when referenced against the output of an "ipconfig /all" or "ifconfig". Then you can change the Wireshark interface name in Preferences/Capture/Interfaces/Edit.
answered 04 Sep '11, 18:44