[Winpcap-users] WinPCap on Vista

[Ioan Popescu]

I know that to use Wireshark (or any WinPCap-based app) on Vista, it must be
"run as administrator" when starting it.

My question is this: Why?

Wireshark itself doesn't do anything worthy of having to be run as
administrator. The WinPCap DLL does the hard work and talks to the driver.
Does anyone know specifically what triggers UAC for Wireshark? Better yet,
is there any way to make Vista "trust" WinPCap and allow applications to run
without requiring administrator privileges?

Ioan