search

nmap / npcap

Nmap Project's Windows packet capture and transmission library
https://npcap.com
Other
2.97k stars 514 forks source link

Error from installing npcap: 0x80070005 #582

Open HuyTyskland opened 2 years ago

HuyTyskland commented 2 years ago

Hello everyone,

I am trying to install the npcap for Wireshark and I met this problem: image

I tried to install the latest version many times but nothing worked. So how can I fix this error?

Thank you, Huy Nguyen.

bloxain commented 2 years ago

i have the exact same problem

Claudio-Osorio commented 2 years ago

+1 Same issue here. I shouldn't have uninstalled the previous version of Wireshark. I tried installing the new one with the updated npcap and now I'm stuck.

KabindaEX commented 2 years ago

I have the same problem. Try running the same version of Npcap on a windows virtual machine. I did and it works fine. Therefore, I know the problem is coming from my PC and not Npcap . I think the problem comes from windows version or something is blocking the NDIS filter drivers from installing.

guyharris commented 2 years ago

Try running the same version of Npcap on a windows virtual machine. I did and it works fine. Therefore, I know the problem is coming from my PC and not Npcap

Therefore, you know that the problem does not occur on all installations of Windows on all machines.

That does not imply that the problem is with the installation of Windows on your machine; it could be that there's something broken about the installation of Windows on your machine, but it could also be that there's something unusual, but completely valid, about the Windows installation on the machine that's having the problem and that Npcap needs to be modified to deal with that.

If it's the formatter, and Npcap can't work around it, it might be nice if it could detect it and report it, to indicate that something needs to be fixed.

If it's the latter, Npcap needs to be changed to handle whatever the issue is.

0x80070005 appears, from some Web searches, to ba an ACCESS_DENIED error of some sort. According to Microsoft's description of the format of NT status values, it's STATUS_SEVERITY_WARNING (0x8......., not 0xC.......), and the facility code is 7. According to this Microsoft page, facility 7 is FACILITY_NTWIN32. If that means "the code part of this is a Win32 error code", then, according to Microsoft's list of Windows error codes, is ERROR_ACCESS_DENIED, the error message for which helpfully explains that pitmans that "Access is denied".

guyharris commented 2 years ago

See also #568.

KabindaEX commented 2 years ago

Understood, thank you. I ran multiple versions of Npcap including the latest just to see what would happen and all failed to install on Windows 10 OS build 19044.1826 physical machine.

Npcap-0.9991: LWF driver has failed to be installed. Npcap-1.60: Unknown error! 8007007e when installing NDIS filter driver and also LWF driver has failed to be installed. Npcap-1.70: Packet Driver (NPCAP) has failed to be installed.

tacoroumen commented 2 years ago

Hello guys, if anyone still has this issue the problem for me was caused by an NDIS driver on the network driver. For me, this driver came with VirtualBox. You can uninstall this driver by going to the network connection properties window and then in the networking from the wifi/ethernet properties there will be one driver called something with NDIS in the name, uninstall this by clicking the driver and then clicking uninstall the error should now be fixed and you will be able to install NPCAP.

aliencaocao commented 1 year ago

Hello guys, if anyone still has this issue the problem for me was caused by an NDIS driver on the network driver. For me, this driver came with VirtualBox. You can uninstall this driver by going to the network connection properties window and then in the networking from the wifi/ethernet properties there will be one driver called something with NDIS in the name, uninstall this by clicking the driver and then clicking uninstall the error should now be fixed and you will be able to install NPCAP.

I do have this installed, but unfortunately I get the same 8007007e error when trying to uninstall or disable it...

VasiliyMooduckovich commented 1 year ago

i got it the same after update nmap(zenmap) from 7.80 to 7.94 with npcap update to 1.75 difference that's it installs just fine but npcap service failed to start because driver file (npcap.sys) was not found. Neither wireshark or zenmap not worked because npcap service\driver not running

So for me i solved it this way: (i assume that your user have administrator privileges)

  1. uninstall npcap from list of installed software
  2. then go to control panel and open properties of your network adapter like this on the screen https://user-images.githubusercontent.com/67157113/210847140-781220e9-7368-4ef4-9342-d82535b56c84.png
  3. select string npcap packet driver (NPCAP) and hit uninstall button but you'll get 0x80070005 error - it doesn't allow to remove the driver

after that reboot into safe mode with network driver support (F5) and follow step 2 and 3 again, it should allow you to remove the driver after that reboot into normal mode and try to install npcap again, that's worked for me