USBPcap: User Account Control window pops up when live capture is started

I am using Wireshark-2.0.3 and USBPcap version 1.2.0.3 on Windows 7 64 bit machine. When Wireshark is started it lists out all the USB ports successfully. But, when tried to start live capture on one of the USB it pops out window "User Account Control" - Image is attached. Would like to know what is the reason that it pops out this window always, is there any way it can be controlled not to pop out always.

I am running Wireshark with my user id which has admin privileges.

Please let me if any other information is required.

Thank you.

kirankumarg.81's avatar
1
kirankumarg.81
asked 2018-07-05 19:23:51 +0000
edit flag offensive 0 remove flag close merge delete

Comments

You are running quite an old version of Wireshark. Have you tried to upgrade to a newer version (currently released is 2.6.1) with the accompanying USB drivers? This issue seems to stem from a configuration issue with USBPcap itself, and a newer version might have that fixed.

rknall's avatar rknall (2018-07-06 11:15:38 +0000) edit
more
  • delete

I just tried installing Wireshark-2.6.1 and observed same behavior. Does USBPcapCMD.exe need to be run every time USB live capture is initiated ? Is this a known/default behavior ?

kirankumarg.81's avatar kirankumarg.81 (2018-07-06 14:36:02 +0000) edit
more
  • delete

Does executing Wireshark to capture USB packets using USBPcap requires admin rights/privileges ?

kirankumarg.81's avatar kirankumarg.81 (2018-08-07 17:19:07 +0000) edit
more
  • delete

Yes, the admin privileges are required for USB packet capture using USBPcap. This is basic security precaution to prevent malicious software silently sniffing the USB keyboards while USBPcap is installed.

desowin's avatar desowin (2019-04-09 15:51:23 +0000) edit
more
  • delete
add a comment see more comments