This wiki has been migrated to https://gitlab.com/wireshark/wireshark/-/wikis/home and is now deprecated. Please use that site instead.
Differences between revisions 11 and 12
Revision 11 as of 2008-05-15 16:22:48
Size: 1862
Editor: snoopy
Comment:
Revision 12 as of 2012-06-09 15:29:51
Size: 2130
Comment:
Deletions are marked like this. Additions are marked like this.
Line 14: Line 14:
 * [[http://www.symantec.com/endpoint-protection|Semantec Endpoint Protection]]: Refer to [[http://ask.wireshark.org/questions/11560/unable-to-capture-or-display-incoming-tcpip-packets-with-port-8100|this]] question on [[http://ask.wireshark.org|ask]] for details.
Line 15: Line 16:

CaptureSetup/InterferingSoftware

Is this problem special to Win32 systems?!?

Software that's working together with the network protocol stack at a low level can cause problems together with WinPcap.

Some known problems are:

  • SonicWALL Global VPN Client, Version 3.1.0.556: When installed together with WinPcap 3.1, the network interfaces are no longer available (ipconfig /all doesn't show them)

  • Cisco VPN client: duplicates packets, even if not running (installation is enough to cause problems) - Steve Masters

  • Cisco VPN client: may hide all packets, even if not connected - disable the firewall in the Cisco VPN client or stop the "Cisco Systems, Inc. VPN Service" -- Matthias Andree

  • F-Secure Anti-Virus Client Security - disable the firewall part of the suite and it works again. Kim Tiedemann

  • Sunbelt Kerio Personal Firewall: Internet connection stops working while capturing, can't browse or anything. Disabling the firewall is not enough. No known workaround at this time.
  • Check Point VPN1 SecureClient (NGX R60 HFA1 Build 019): Tools>Disable Security Policy

  • Semantec Endpoint Protection: Refer to this question on ask for details.

  • <please append other known problems here>

If you have any such problems, you may contact the WinPcap team directly as the Wireshark developers can't do anything against it.

Discussion

Is this a Win32 only problem, or are other OS/software combinations also problematic?

I had this happen to me using Windows XP Professional, Version 2002, SP2 and SonicWALL Global VPN Clinet, Version 3.1.0.556. This happens with both the 0.10.13 and 0.10.14 downloads of Wireshark. I would be willing to help debug a solution ( wvpowell@indesign-llc.com ).

We (the Wireshark developers) have outsourced Windows NDIS expertise to the WinPcap developers; you should contact them to see if they can work with you on this. --Guy Harris

CaptureSetup/InterferingSoftware (last edited 2018-06-15 15:27:16 by JaapKeuter)