<HTML dir=ltr><HEAD>
<META content="text/html; charset=unicode" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.18702"></HEAD>
<BODY>
<DIV dir=ltr id=idOWAReplyText88476>
<DIV dir=ltr><FONT color=#000000 size=2 face=Arial>I checked the c:\windows\system32\drivers\npf.sys and it looks to be the x32 driver and my OS is 32-bit. </FONT></DIV>
<DIV dir=ltr><FONT size=2 face=Arial>I'll go ahead and follow the steps for submitting a bug from that link.</FONT></DIV>
<DIV dir=ltr><FONT color=#000000 size=2 face=Arial></FONT> </DIV></DIV>
<DIV dir=ltr id=idSignature74976>
<DIV><FONT color=#000000 size=2 face=Arial>
<DIV dir=ltr><FONT size=2 face=Arial>Thanks,</FONT></DIV>
<DIV dir=ltr><FONT size=2 face=Arial>Andy Merrill</FONT></DIV>
<DIV dir=ltr> </DIV>
<DIV dir=ltr>____________________________________________________________________</DIV>
<DIV dir=ltr> </DIV>
<DIV dir=ltr>Date: Wed, 27 May 2009 08:27:01 -0700<BR>From: "Gianluca Varenni" <gianluca.varenni@cacetech.com><BR>Subject: Re: [Winpcap-users] Error Starting NPF<BR>To: <winpcap-users@winpcap.org><BR>Message-ID: <28A8B9CA0DAB437D9C656D2E5899516D@nelson2><BR>Content-Type: text/plain; format=flowed; charset="iso-8859-1";<BR> reply-type=original<BR><BR>It can definitely be.<BR><BR>Can you please check the properties of c:\windows\system32\drivers\npf.sys?<BR><BR>In the case of the x64 driver, the description of the driver should be<BR><BR>npf.sys (NT5/6 AMD64) Kernel Driver<BR><BR>Have a nice day<BR>GV<BR><BR><BR>----- Original Message -----<BR>From: "Fish" <fish@infidels.org><BR>To: <winpcap-users@winpcap.org><BR>Sent: Tuesday, May 26, 2009 8:34 PM<BR>Subject: Re: [Winpcap-users] Error Starting NPF<BR><BR><BR>><BR>> -----BEGIN PGP SIGNED MESSAGE-----<BR>> Hash: SHA1<BR>><BR>> I am not saying this is what the problem is, but I can state that I<BR>> personally experienced this very issue a long time ago whenever I<BR>> first began playing around with x64. In my particular case it was x64<BR>> windows complaining that the driver it was trying to load was not a<BR>> 64-bit driver. Somehow things got setup such that the 32-bit driver<BR>> was always trying to be loaded which does not work on 64-bit Windows.<BR>> On 64-bit Windows all drivers must be 64-bit. Either that or the<BR>> opposite: a 64-bit driver was trying to be loaded by 32-bit Windows.<BR>><BR>> Again, I'm not stating that is your problem, only that the "Driver<BR>> has been blocked from loading" error message you mention was<BR>> experienced by myself for the reasons described.<BR>><BR>> Hope that helps.<BR>><BR>> - --<BR>> "Fish" (David B. Trout) - fish@softdevlabs.com<BR>> Fight Spam! Join CAUCE! <<A href="https://exg4.exghost.com/exchweb/bin/redir.asp?URL=http://www.cauce.org/" target=_blank>http://www.cauce.org/</A>><BR>> 7 reasons why HTML email is a bad thing<BR>> <A href="https://exg4.exghost.com/exchweb/bin/redir.asp?URL=http://www.georgedillon.com/web/html_email_is_evil.shtml" target=_blank>http://www.georgedillon.com/web/html_email_is_evil.shtml</A><BR>> PGP key fingerprints:<BR>> RSA: 6B37 7110 7201 9917 9B0D 99E3 55DB 5D58 FADE 4A52<BR>> DH/DSS: 9F9B BAB0 BA7F C458 1A89 FE26 48F5 D7F4 C4EE 3E2A<BR>><BR>> -----Original Message-----<BR>> From: winpcap-users-bounces@winpcap.org<BR>> [<A href="mailto:winpcap-users-bounces@winpcap.org" target=_blank>mailto:winpcap-users-bounces@winpcap.org</A>]On Behalf Of Andy Merrill<BR>> Sent: Tuesday, May 26, 2009 10:49 AM<BR>> To: winpcap-users@winpcap.org<BR>> Subject: [Winpcap-users] Error Starting NPF<BR>><BR>><BR>> I'm getting an odd error when I try to run WireShark. So I started<BR>> doing some digging and found that WinPcap 4.0.2 is not starting up.<BR>> I've used it plenty of times in the past on other systems, but on<BR>> this specific box I get an error in the Event Logs that says:<BR>><BR>> "The NetGroup Packet Filter Driver service failed to start due to<BR>> the following error:<BR>> This driver has been blocked from loading "<BR>><BR>> So I tried to start it via command line with "net start npf" and<BR>> got pretty much the same error of:<BR>><BR>> "System error 1275 has occurred.<BR>><BR>> This driver has been blocked from loading"<BR>><BR>><BR>><BR>> Anyone have an idea why the drivers might be failing to load?<BR>><BR>><BR>><BR>> This is on a Windows Server 2003 system running in a VPS.<BR>><BR>><BR>> Thanks,<BR>> Andy Merrill<BR>><BR>> -----BEGIN PGP SIGNATURE-----<BR>> Version: PGP 8.1<BR>><BR>> iQA/AwUBShy0vkj11/TE7j4qEQKH/wCfSjB3mQq09LmPKnRJvVp9H1Yth1wAnj1t<BR>> cm1CMEKzZsQW5dT0km1kAJni<BR>> =ExiA<BR>> -----END PGP SIGNATURE-----<BR>><BR><BR><BR>--------------------------------------------------------------------------------<BR><BR><BR>> _______________________________________________<BR>> Winpcap-users mailing list<BR>> Winpcap-users@winpcap.org<BR>> <A href="https://exg4.exghost.com/exchweb/bin/redir.asp?URL=https://www.winpcap.org/mailman/listinfo/winpcap-users" target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A><BR>><BR></DIV></FONT></DIV></DIV></BODY></HTML>