Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] Dumpcap instead of Winpcap?

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "km" <km@xxxxxxxxx>
Date: Wed, 10 Feb 2010 14:54:12 +0100

I have installed the latest versions of Wireshark (1.2.6) and WinPcap (4.1.1). When I start a capture the screen goes black but for a white cursor. This is Dumpcap, which seems to be used in stead of WinPcap. I can bring back the desktop by pressing CTRL-ALT-DEL and Wireshark is capturing packets. I have used Ethereal/Wireshark for years without any problems.

I have checked with msinfo32 that WinPcap (npf) is running.

What's going on? Is this a configuration issue?

I have also tried to go back to older versions of both programs and the same thing happens.

Grateful for an explanation.




  • Follow-Ups:
    • Re: [Wireshark-users] Dumpcap instead of Winpcap?
      • From: Jaap Keuter
    • Re: [Wireshark-users] Dumpcap instead of Winpcap?
      • From: Guy Harris
  • Prev by Date: Re: [Wireshark-users] Capture from two NIC at the same time
  • Next by Date: Re: [Wireshark-users] Capture from two NIC at the same time
  • Previous by thread: Re: [Wireshark-users] Capture from two NIC at the same time
  • Next by thread: Re: [Wireshark-users] Dumpcap instead of Winpcap?
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation