Jared Heinrichs

You are here: Home / Programs / WireShark / The NPF driver isn't running – Wireshark

By 43 Comments

The NPF driver isn't running – Wireshark

Wireshark – The NPF driver isn’t running

As soon as I opened my wireshark, the message popped up: “The NPF driver isn’t running…

As a local administrator do this:

net start npf

Now go back and open WireShark. Everything will be ok 😉

Comments

  1. Your post has been found. I thank you for this information, as it worked quite well.
    ~Scott

  4. I’ve tried doing this, but when I do it gives me this message “System error 5 has occured. Access is denied”
    I am using Win7 Pro in administrator mode, and I even used the run program with control+alt+enter to make sure I was in admin command prompt. What else can I do?

  6. click on the shortcut, select properties, select run as administator. when she starts npf will start also.

  7. Run command prompt as admin not as user admin. you need to be in the C:/windos/system32/ directory to run the ‘net start npf’ command as admin

  8. @Tim

    You can start the driver by hand before starting Wireshark and stop it afterwards.
    Using Wireshark running in a user account could look like:
    Start the NPF driver:
    runas /u:administrator “net start npf”
    Start Wireshark as a user and work with it, including capturing, until the specific job is finished.
    Stop the NPF driver again:
    runas /u:administrator “net stop npf”

  14. Hi,

    I am new at using Wireshark. I need to trace packets from a darwin streaming server using VLC at the client. TCP connection establishment, RTP data packets and RTCP packets and things like that. I have setup the darwin server and also the Wireshark. Any suggestions on how should I proceed.

  29. i i am using windows 7 ultimate

    i cant understand “net start npf”

    i run this but it showing me search result

    please help me.

  30. “net start npf” is needed to be run from a command prompt. Right click a shortcut to the command prompt and tell it to run as an administrator. A little black command prompt window will open. type those three words exactly how you see them including the spaces. It will work.

  33. By running as an administrator i am able to find the interfaces but the packet sniffing does not show up, kindly share your thoughts.

  35. Works OK. Win 7, installed Wireshark, worked fine the first time the program is runned. Turn off the PC, turn on, start Wireshark and since then message “NPF driver not found” is shown.

    Tried : “net start npf” from command prompt, but doesnt work, says “Access denied”.

    Right click on shortcut, properties, enable “run as admin”, ok. Then click on shortcut and goes OK.

  37. I just reinstalled my pc, then the WireShark didn’t work for me …even after doing what you suggested…cmd said server invalid

  38. The way that worked for me was:
    Right Click on Short Cut, Properties, Compatability Tab, where it says Privilege Level, tick “run this program as an administrator”.

  39. ThanX guys…. U guys are such a help… I have been looking for this soln for quite sometime

  41. Was to lazy to think for myself, googled and found this sollution which worked out nicely. Thanks!

  42. `net start npf` works for me, thanks!

    Still wondering, what is npf anyway?
    It’s nowhere in services.msc, nor `wmic service list`.

Leave a Reply

Your email address will not be published. Required fields are marked *

Try searching this site!