https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16052

--- Comment #1 from Gerald Combs <ger...@wireshark.org> ---
(In reply to Dylan from comment #0)

> To repeat:
> 1. Uninstall WinPcap, Npcap, Wireshark to get a clean system (since
> Wireshark devs often have different versions of Npcap, etc installed)
> 2. Install Wireshark-win64-3.0.3.exe (which includes Npcap 0.995). Use all
> the default options
> 3. Everything is good. Wireshark 3.0.3 shows all network interfaces, and
> works fine
> 4. Install Wireshark-win64-3.0.4.exe (which includes Npcap 0.9983). Use the
> default options until you get to the "Npcap 0.995 is likely to crash on
> uninstall" screen. See screenshot: https://imgur.com/a/7elWnAL
> 5. "Do you want to disable it on reboot and try again?". Selecting "No"
> sounds like it will make your computer crash, so select "Yes". "Yes" is the
> selected default.
> 6. Popup shows "Npcap 0.995 disabled. Please reboot and try again."
> 7. Wireshark continues to install, and reports "Complete"
> 8. Wireshark prompted to "Reboot now", so do that.
> 9. After reboot, Wireshark is installed. But, it is not functional for
> actually capturing network traffic because there are "No interfaces found".
> (Because Npcap was disabled, and the new one is not installed).
> 10. Before rebooting, Npcap told you to try again, but Wireshark users don't
> have the Npcap installer, since it was bundled inside Wireshark. So what are
> users supposed to try again?
> 11. You have to rerun the Wireshark installer, which then prompts you to
> uninstall the version of Wireshark that you just installed.

I was able to replicate this here by installing Npcap 0.995 prior to running
the Wireshark 3.0.4 installer.

> Ideas:
> 1. Work with Npcap developer to provide a cleaner upgrade from 0.995 to
> later versions.
> 2. Add some extra screens/info to the Wireshark installer on what the
> correct approach to upgrade is.

Npcap 0.995 and 0.994 can cause a BSOD in some cases, particularly during
uninstallation, so I'm not sure if a cleaner upgrade path is possible:

https://github.com/nmap/nmap/issues/1675
https://github.com/nmap/nmap/issues/1626
https://github.com/nmap/nmap/issues/1621
https://github.com/nmap/nmap/issues/1591

One option might be to simply refuse to proceed if Npcap 0.994 or 0.995 are
installed.

-- 
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to