From: http://hi.baidu.com/shijizhishang/item/6f727c0d1b93182da1312d6f
A few days ago, the system was reinstalled with the Windows 7 RC system. Yesterday, I started to install Wireshark, a powerful network monitoring software, and opened it with joy. However, every time I open it, "the NPF driver isn't running.... Last night, I had a hard time solving the problem. Baidu and Google once said they wanted to open the NPF driver. Then I found the NPF. SYS file under c: \ windows \ system32 \ drivers \. How can I start this file? I really don't know.
When I came to the company, I had already planned to give up. I did not expect to solve it with the help of my colleagues today. Write it here and share it with the brothers who need it:
First, you have to confirm that you have installed Winpcap (it is best to download the latest version: Official download. This will not seem to be available officially, or you can download it from huajun). Then
(1) If you are using Linux and Ubuntu systems, use the> $ su administrator command to switch to the account with the highest permissions, and then enter the command: "Net start NPF" (if you cannot find similar commands by yourself ).
(2) If Windows XP \ me is used, log on with the Administrator account, open cmd, and enter the command "Net start NPF". A message indicating that the driver service is successfully enabled is displayed.
(3) If you are using Windows Vista or Windows 7 for trial, find the cmd.exe file under "C: \ WINDOWS \ System32, right-click "Run as administrator" and enter the "Net start NPF" command in command line mode to enable the NPF driver, which should be the npf I found earlier. the sys file is opened.
Finally, re-open Wireshark, and "bingo" can finally run normally.