Each time I start WS I get this popup about admin-mode being allowed to make changes. I select yes or no and it continues to popup making WS unusable. Has anyone come across this? I believe it's related to npcap being used in admin mode only or something like that. I have the 64 bit latest version downloaded directly from wireshark.org. ej
I got it to work this time by uninstalling, rebooting and reinstalling, for the 3rd time, and the only option I selected was to allow npcap to be winpcap compatible. I left the run only as admin function for npcap and the rest unchecked. It appears to be working.
ej
It's the npcap option to require admin privileges to capture that causes this behaviour. This is not checked by default (the npcap installer may remember options from a previous install though) and should not be checked unless you need, or are required by some local policy, to do so.
You should also not check the winpcap compatible mode option unless you actually need that for other software, Wireshark does not need that option.
Comments