Wireshark-users: [Wireshark-users] Default Interface
From: McCabe John G <JGMCCABE@xxxxxxxxxxx>
Date: Wed, 25 Apr 2007 13:26:25 +0100
Dear all,

Sorry if this has been asked before, but I couldn't find it in the archives.

I'm running Wireshark 0.99.5 (SVN Rev 20677) on:

Windows 2000 SP4, build 2195 with WinPCap version 4.0 (packet.dll version 4.0.0.755) based on libpcap version 0.9.5, without AirPcap.

When I start Wireshark, if I select "Capture" -> "Start" I get a message about being unable to open the capture interface. I have gone in to the capture section of the preferences and set the Default Interface to the actual iterface but that doesn't seem to help.

What I have noticed though is that when I open the Capture Options dialog, the selected interface says something like:

\Device\Packet_{<long guid thingy>}

However, when I drop the box down and select the real thing (the one that works) it is listed as 

<Name of the device>: \Device\NPF_{<same long guid thingy as above>}

Am I doing something wrong? Is there a way to sort this out?

Thanks

John McCabe
Software Engineering

The information contained in this E-Mail and any subsequent 
correspondence is private and is intended solely for the intended 
recipient(s).  The information in this communication may be 
confidential and/or legally privileged.  Nothing in this e-mail is 
intended to conclude a contract on behalf of QinetiQ or make QinetiQ 
subject to any other legally binding commitments, unless the e-mail 
contains an express statement to the contrary or incorporates a formal Purchase Order.

For those other than the recipient any disclosure, copying, 
distribution, or any action taken or omitted to be taken in reliance 
on such information is prohibited and may be unlawful.

Emails and other electronic communication with QinetiQ may be 
monitored and recorded for business purposes including security, audit 
and archival purposes.  Any response to this email indicates consent 
to this.

Telephone calls to QinetiQ may be monitored or recorded for quality 
control, security and other business purposes.

QinetiQ Limited
Registered in England & Wales: Company Number:3796233
Registered office: 85 Buckingham Gate, London SW1E 6PD, United Kingdom
Trading address: Cody Technology Park, Cody Building, Ively Road, Farnborough, Hampshire, GU14 0LX, United Kingdom 
http://www.QinetiQ.com/home/legal.html