nmap / npcap

Nmap Project's Windows packet capture and transmission library
https://npcap.com
Other
2.99k stars 516 forks source link

Network connectivity disruption on Windows 2019 during installation #325

Closed mkolechkin closed 3 years ago

mkolechkin commented 4 years ago

Silent installation of the latest available build 0.9986 on Windows 2019 disrupts connectivity. I started installation with options '/S /winpcap_mode=yes /loopback_support=no' and during installation my Remote Desktop session was interrupted and then RDC reconnected back after some time. Other connections failed, so disruption is a problem. I did not observe this issue on earlier Windows Server versions, like 2012 R2. I did not try Win2016, I heard from a colleague it is not a problem on Win2016, but not sure. Could you please take a look at this issue.

Thank you, Mike

install.log NPFInstall.log

mkolechkin commented 4 years ago

I just checked WinPcap 4.1.3 aka 4.1.0.2980 silent installation on the same Windows 2019 machine. It works perfectly without network disconnection. Just for information, I know they are different (NDIS 5 vs NDIS 6 etc), I just hope it can help to narrow down options.

dmiller-nmap commented 4 years ago

Thanks for the report. This is a known issue (see nmap/npcap#53 for instance) that is not unique to Npcap; installing the demo NDIS 6 filter driver from Microsoft/Windows-driver-samples will do the same thing in certain situations. It appears to only affect newer releases of Windows 10 (e.g. Server 2019 Datacenter) and only in some situations like interfaces with QoS or 802.1X enabled. We've reached out on TechNet Forums and StackOverflow without getting any solid answers. It is really out of our hands, and the only workaround currently is to schedule installation for a time when the interruption will have the least impact, such as at the next boot.

I'm closing this issue as a duplicate of nmap/npcap#53, since the underlying cause is the same even if this is not 802.1X-specific.

mkolechkin commented 4 years ago

Daniel, Thank you!