When starting the Wireshark software, as shown in the error, the search for a solution, the following is summed up as follows:
This error is caused by not opening the NPF service. Briefly say NPF.
NPF , the network packet filter (Netgroup Packet FILTER,NPF) is a core part of WinPcap, and it is the component that WinPcap does difficult work. It processes packets that are transmitted over the network and provides capture (capture), send (injection), and analytical performance (analysis capabilities) to the user level. it not only provides basic features (such as grabbing packets), but also more advanced features (such as a programmable filter system). The former can be used to constrain a packet capture session only for a subset of network traffic, which provides a powerful and simple mechanism for statistical network traffic.
The solution is as follows:
(1) Make sure you install the WinPcap (which will be prompted when installing Wireshark) can also be downloaded from the official website:
Address: http://www.winpcap.org/
(2) at the command prompt, enter : net start NPF will prompt to open the driver service successfully. As shown in the following:
If you want to close the service, enter the: net stop NPF. Okay, now the Wireshark can work perfectly.
About Wireshark "The NPF driver isn ' t running ..." Workaround