Shulou(Shulou.com)06/01 Report--

Wireshark is a very important packet grabbing tool for learning computer network. The packet grabbing tool can specify the network card interface and accurately show the operation flow and data format of the network protocol according to the specific network protocol. It is an essential thing for us to understand the deep principle of the computer network protocol.

However, recently, when using Wireshark to grab http protocol packets, it was found that no available Nic was captured, as shown in the following figure:

After looking at a series of materials, we learned the solution:

The first time you start Wireshark, please start it as an administrator. (keep in mind) if you start as a normal user, even when you start the npf service on the command line, it will show that the service name is invalid

So be sure to turn on Wireshark as an administrator first

Second, when Wireshark is turned on at this time, the available network card interface may not be displayed (not absolutely). In fact, the Nic information captured by Wireshark is related to Windows's npf service, and it is not correctly captured because the npf service is not enabled, so you only need to open the command line as an administrator, and then open the npf service.

Tips: the command to enable the service is

Net start npf

Third, at this time to check the Wireshark situation, it will show that the correct capture to the network card.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.