[Windump] no interface found on Vista

S.P. s.puygrenier at freesurf.fr
Tue Apr 7 08:12:53 PDT 2009


Hi,

I tried to install WinPcap on Vista (quite fresh install), in order to use
Wireshark, but it seems that it can't find any network interface, which is a
little bit annoying :)

Here are some diagnostic elements... (few comments added between
parenthesis)

G:\>windump -D
(nothing)

G:\>windump -h
windump version 3.9.5, based on tcpdump version 3.9.5
WinPcap version 4.0.2 (packet.dll version 4.0.0.1040), based on libpcap
version
0.9.5
Usage: windump [-aAdDeflLnNOpqRStuUvxX] [ -B size ] [-c count] [ -C
file_size ]
                [ -E algo:secret ] [ -F file ] [ -i interface ] [ -M secret
]
                [ -r file ] [ -s snaplen ] [ -T type ] [ -w file ]
                [ -W filecount ] [ -y datalinktype ] [ -Z user ]
                [ expression ]

G:\>set
(stripped)
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 8 Stepping 1, AuthenticAMD
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0801
SystemDrive=G:
SystemRoot=G:\Windows
TEMP=G:\temp
TMP=G:\temp

G:\>sc qc NPF
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: NPF
        TYPE               : 1  KERNEL_DRIVER
        START_TYPE         : 2   AUTO_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : system32\drivers\npf.sys
        LOAD_ORDER_GROUP   :
        TAG                : 0
        DISPLAY_NAME       : NetGroup Packet Filter Driver
        DEPENDENCIES       :
        SERVICE_START_NAME :

G:\>sc query NPF

SERVICE_NAME: NPF
        TYPE               : 1  KERNEL_DRIVER
        STATE              : 4  RUNNING
                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

G:\>ipconfig /all
(xxxx-ed)

Windows IP Configuration

   Host Name . . . . . . . . . . . . : xxxxx
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

PPP adapter Internet ADSL:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Internet ADSL
   Physical Address. . . . . . . . . :
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 84.102.211.xx (Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.255
   Default Gateway . . . . . . . . . : 0.0.0.0
   DNS Servers . . . . . . . . . . . : 84.103.237.xx
                                       86.64.145.xx
   NetBIOS over Tcpip. . . . . . . . : Disabled


G:\>ping www.yahoo.com

Pinging www-real.wa1.b.yahoo.com [87.248.113.14] with 32 bytes of data:

Reply from 87.248.113.14: bytes=32 time=401ms TTL=57
Reply from 87.248.113.14: bytes=32 time=61ms TTL=57
Reply from 87.248.113.14: bytes=32 time=63ms TTL=57

Ping statistics for 87.248.113.14:
    Packets: Sent = 3, Received = 3, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 61ms, Maximum = 401ms, Average = 175ms
Control-C
^C

G:\>ver

Microsoft Windows [Version 6.0.6000]

(vista home premium / english)

G:\>net start
These Windows services are started:

   Application Experience
   Ati External Event Utility
   Background Intelligent Transfer Service
   Base Filtering Engine
   COM+ Event System
   Cryptographic Services
   DCOM Server Process Launcher
   Desktop Window Manager Session Manager
   DHCP Client
   Diagnostic Policy Service
   Diagnostic System Host
   Distributed Link Tracking Client
   DNS Client
   DU Meter Service
   Group Policy Client
   IKE and AuthIP IPsec Keying Modules
   IP Helper
   IPsec Policy Agent
   KtmRm for Distributed Transaction Coordinator
   lxdb_device
   Multimedia Class Scheduler
   Network Connections
   Network List Service
   Network Location Awareness
   Network Store Interface Service
   PC Tools Firewall Plus
   Plug and Play
   Portable Device Enumerator Service
   Program Compatibility Assistant Service
   Protected Storage
   Protexis Licensing V2
   Remote Access Connection Manager
   Remote Procedure Call (RPC)
   Secondary Logon
   Security Accounts Manager
   Shell Hardware Detection
   SL UI Notification Service
   Software Licensing
   SSDP Discovery
   System Event Notification Service
   Task Scheduler
   TCP/IP NetBIOS Helper
   Telephony
   Themes
   User Profile Service
   WebClient
   Windows Audio
   Windows Audio Endpoint Builder
   Windows Driver Foundation - User-mode Driver Framework
   Windows Event Log
   Windows Management Instrumentation
   Windows Update

The command completed successfully.

###########

IPv6 is disabled in RAS connection

modem = sagem f at st 800 usb (simple adsl modem, not a full adsl "box" with
tv/phone/etc. - this model is quite classic in France)

problem remains when changing encapsulation PPPoA/PPPoe/VCMUX/etc.

msinfo32.exe/system driver/npf : npf.sys/kernel driver/started/auto/running

pc tools firewall+ installed, but problem remains when stopping it

any other diagnostic on request...

Best regards,
SP






More information about the Windump mailing list