Wireshark-users: Re: [Wireshark-users] Wireshark broke down: NPF problem

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Wed, 7 May 2008 22:07:52 -0600

On Wed, May 07, 2008 at 08:31:06PM -0700, Condor Kim wrote:

> I've been using wireshark just fine, until one day, without previous 
> sign, as soon as I opened my wireshark, the message popped up: "The 
> NPF driver isn't running. You may have trouble capturing or listing 
> interfaces."

Without WinPcap functioning properly, Wireshark won't be able to run (on 
Windows).

> I didn't understand anything, but, reading that NPF is part of 
> WinPcap, I re-downloaded WinPcap, but no use.

The WinPcap mailing list is probably a better place to ask this question 
then: http://www.winpcap.org/contact.htm

> Then I ran my Italian Analyzer, which worked (although for a long time 
> it has been running extremely slow), which meant (I thought) that 
> WinPcap was not the problem.

Are you sure your Italian Analyzer uses WinPcap?  Many commercial 
analyzers don't use WinPcap.


Steve