If you are trying to capture traffic from a machine to itself, that traffic will not be sent over a real network interface, even if it's being sent to an address on one of the machine's network adapters.
I crashed 2 boxes due to this and had to reset one due to a trashed file system.Loopback capture setup The following will explain capturing on loopback interfaces a bit. This needs to be addressed this is obviously broken, broken being an understatement. It may not be possible to do a clean uninstall of npcap, I had to remove the files manually and I used cc cleaner to locate the defunct registry entries and removed them. Make sure you uninstall wireshark as well.
Do not do this outside of safe mode or it will BSOD again. Once you are in safe mode without networking, Open device manager, and under network adapters locate "npcap loopback" and delete it.Īlso delete any references of npcap in device manager. And my VPN Astrill is totally paralyzed by this. But lots of signs shows that it is still there. You can't see the loopback adapter in the Device Manager. So this whole thing is in a state of Schrodinger's Npcap. Again even doing this will give me a BSoD. After that I also downloaded the seperate installer from Npcap to install it.
When I tried to reinstall Wireshark, hoping that uninstalling it after would likely do a full clean-up, the installer told me that I already have Npcap installed. I found out that Npcap directory is still there sitting inside the default install directory, with some of its files still intact, laughing at me again. And there is something even stranger about it. But still, Astrill is still not working after the adapter is gone in the device manager. He solved it by uninstalling the adapter in the Safe Mode. So I googled it for a long time and found someone with the same problem. I was just trying to solve a single problem, which against my will introduced even more problems. So I went to Device Manager to uninstall that adapter and guess what. What's even more strange and frustrating is that I can see that Npcap loopback adapter is still there, laughing at me. After uninstalling Wireshark, which also calls the uninstalling process for Npcap along the way, Astrill is still not working. So I figured It must be the problem of Wireshark or Npcap. Today I installed Wireshark to check my wifi traffic. Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.Īlready on GitHub? Sign in to your account.
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.