[Winpcap-users] WinPCap on Vista

Ioan Popescu ipopescu at dataq.com
Wed Sep 12 15:59:16 GMT 2007

I know that to use Wireshark (or any WinPCap-based app) on Vista, it must be
"run as administrator" when starting it.

My question is this: Why?

Wireshark itself doesn't do anything worthy of having to be run as
administrator. The WinPCap DLL does the hard work and talks to the driver.
Does anyone know specifically what triggers UAC for Wireshark? Better yet,
is there any way to make Vista "trust" WinPCap and allow applications to run
without requiring administrator privileges?


More information about the Winpcap-users mailing list