nmap / nmap/npcap

Npcap driver can't start

Open
#678 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
C
Stars
3.6k
Forks
592
PR merge metrics
No merged PRs in 30d

Description

Description:
I already executed the FixInstall.bat, reinstalled it, typed the net start/stop npcap, and the nmap still says that the npcap driver still missing. It happens everytime when i try to run nmap {scan techinque, like the -sX} {target}
Screenshots:
Capture
Diagnostic information:


DiagReport for Npcap ( https://npcap.com )


Architecture: 64-bit
Script Path: C:\Program Files\Npcap\DiagReport.ps1
Current Time: 06/10/2023 11:17:34
Npcap install path: C:\Program Files\Npcap
Npcap Version: 1.75
PowerShell Version: 5.1.19041.3031


OS Info:


Caption : Microsoft Windows 10 Home Single Language
BuildNumber : 19045
Locale : 0409
MUILanguages : {en-GB}
OSArchitecture : 64-bit
ServicePackMajorVersion : 0
ServicePackMinorVersion : 0
SystemDirectory : C:\Windows\system32
Version : 10.0.19045


CPU Info:


Name : Intel(R) Core(TM) i3-8130U CPU @ 2.20GHz
Manufacturer : GenuineIntel
DeviceID : CPU0
NumberOfCores : 2
NumberOfEnabledCore : 2
NumberOfLogicalProcessors : 4
Addresswidth : 64


Memory Info:


Size: 4001 MB (4195586048 Bytes)


Network Adapter(s) Info:


Caption : [00000001] Intel(R) Dual Band Wireless-AC 3165
GUID : {514A3E69-5B94-44CB-8258-C4F9005258C9}
Index : 1
InterfaceIndex : 7
Manufacturer : Intel Corporation
MACAddress : 5C:CD:5B:8F:5E:B2
Speed : 433300000
NetConnectionID : WiFi
NetConnectionStatus : 2
PNPDeviceID : PCI\VEN_8086&DEV_3166&SUBSYS_42108086&REV_99\5CCD5BFFFF8F5EB200
ServiceName : Netwtw04
AdapterType : Ethernet 802.3
Caption : [00000012] TAP-Windows Adapter V9 for OpenVPN Connect
GUID : {35895535-598C-44A1-BE87-D5673CDA98FA}
Index : 12
InterfaceIndex : 5
Manufacturer : TAP-Windows Provider V9 for OpenVPN Connect
MACAddress : 00:FF:35:89:55:35
Speed : 1000000000
NetConnectionID : Local Area Connection 2
NetConnectionStatus : 7
PNPDeviceID : ROOT\NET\0002
ServiceName : tap_ovpnconnect
AdapterType : Ethernet 802.3

Caption : [00000013] TAP-ProtonVPN Windows Adapter V9
GUID : {62B8426B-DC48-4ADE-AF47-201996AAC658}
Index : 13
InterfaceIndex : 9
Manufacturer : TAP-ProtonVPN Windows Provider V9
MACAddress : 00:FF:62:B8:42:6B
Speed : 1000000000
NetConnectionID : Local Area Connection
NetConnectionStatus : 7
PNPDeviceID : ROOT\NET\0000
ServiceName : tapprotonvpn
AdapterType : Ethernet 802.3

Caption : [00000014] Wintun Userspace Tunnel
GUID : {AFDEECBA-DFBA-CAFF-5044-013412BCEACD}
Index : 14
InterfaceIndex : 17
Manufacturer : WireGuard LLC
MACAddress :
Speed : 100000000000
NetConnectionID : ProtonVPN TUN
NetConnectionStatus : 7
PNPDeviceID : ROOT\NET\0001
ServiceName : wintun
AdapterType :


NDIS Light-Weight Filter (LWF) Info:


HKLM:\SYSTEM\CurrentControlSet\Control\Network{4d36e974-e325-11ce-bfc1-08002be10318}*:

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics : 262144
ComponentId : ms_bridge
Description : @%SystemRoot%\system32\bridgeres.dll,-2
InfPath : netbrdg.inf
InfSection : Install
LocDescription : @%SystemRoot%\system32\bridgeres.dll,-2

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics : 262184
ComponentId : ms_wfplwf_lower
Description : @%windir%\System32\drivers\wfplwfs.sys,-6006
InfPath : wfplwfs.inf
InfSection : WfpLwf_Lower_Install
LocDescription : @%windir%\System32\drivers\wfplwfs.sys,-6006

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics : 40
ComponentId : ms_netbios
Description : @%windir%\system32\drivers\netbios.sys,-501
InfPath : netnb.inf
InfSection : NetBIOS.ndi
LocDescription : @%windir%\system32\drivers\netbios.sys,-501

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics : 262200
ComponentId : ms_ndiscap
Description : @%windir%\System32\drivers\ndiscap.sys,-5000
InfPath : ndiscap.inf
InfSection : Install
LocDescription : @%windir%\System32\drivers\ndiscap.sys,-5000

InstallTimeStamp : {221, 7, 12, 0...}
ComponentId : ms_server
Description : @%systemroot%\system32\srvsvc.dll,-109
InfPath : Netserv.inf
InfSection : Install.ndi
LocDescription : @%systemroot%\system32\srvsvc.dll,-109

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics : 262184
ComponentId : ms_vwifi
Description : @%windir%\System32\drivers\vwififlt.sys,-105
InfPath : netvwififlt.inf
InfSection : Install
LocDescription : @%windir%\System32\drivers\vwififlt.sys,-105

InstallTimeStamp : {231, 7, 3, 0...}
Characteristics : 262144
ComponentId : INSECURE_NPCAP
Description : @oem44.inf,%npf_desc_standard%;Npcap Packet Driver (NPCAP)
InfPath : oem44.inf
InfSection : FilterStandard
LocDescription : @oem44.inf,%npf_desc_standard%;Npcap Packet Driver (NPCAP)

InstallTimeStamp : {231, 7, 6, 0...}
Characteristics : 262144
ComponentId : INSECURE_NPCAP_WIFI
Description : @oem44.inf,%npf_desc_wifi%;Npcap Packet Driver (NPCAP) (Wi-Fi)
InfPath : oem44.inf
InfSection : FilterWiFi
LocDescription : @oem44.inf,%npf_desc_wifi%;Npcap Packet Driver (NPCAP) (Wi-Fi)

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics : 262144
ComponentId : ms_pacer
Description : @%windir%\System32\drivers\pacer.sys,-101
InfPath : netpacer.inf
InfSection : Install
LocDescription : @%windir%\System32\drivers\pacer.sys,-101

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics : 262184
ComponentId : ms_wfplwf_upper
Description : @%windir%\System32\drivers\wfplwfs.sys,-6005
InfPath : wfplwfs.inf
InfSection : WfpLwf_Upper_Install
LocDescription : @%windir%\System32\drivers\wfplwfs.sys,-6005

InstallTimeStamp : {231, 7, 3, 0...}
Characteristics : 262184
ComponentId : KL_KLIM6
Description : @oem42.inf,%klim6_desc%;Kaspersky Anti-Virus NDIS 6 Filter
InfPath : oem42.inf
InfSection : Install
LocDescription : @oem42.inf,%klim6_desc%;Kaspersky Anti-Virus NDIS 6 Filter

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics : 262184
ComponentId : ms_nativewifip
Description : @%windir%\System32\drivers\nwifi.sys,-101
InfPath : netnwifi.inf
InfSection : MS_NWIFI.Install
LocDescription : @%windir%\System32\drivers\nwifi.sys,-101

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics : 262144
ComponentId : ms_wfplwf_vswitch
Description : @%windir%\System32\drivers\wfplwfs.sys,-6004
InfPath : wfplwfs.inf
InfSection : WfpLwf_vSwitch_Install
LocDescription : @%windir%\System32\drivers\wfplwfs.sys,-6004

Name DisplayName ComponentID Enabled


ProtonVPN TUN Npcap Packet Driver (NPCAP) INSECURE_NPCAP True
Local Area Connection Npcap Packet Driver (NPCAP) INSECURE_NPCAP True
WiFi Npcap Packet Driver (NPCAP) INSECURE_NPCAP True
WiFi Npcap Packet Driver (NPCAP) (Wi-Fi) INSECURE_NPCAP_WIFI True
Local Area Connection 2 Npcap Packet Driver (NPCAP) INSECURE_NPCAP True


File Info:


LastWriteTime : 10/06/2023 02:22:07
Length : 799
Name : CheckStatus.bat

LastWriteTime : 10/06/2023 11:17:33
Length : 0
Name : DiagReport-20230610-111733.txt

LastWriteTime : 10/06/2023 02:22:07
Length : 1023
Name : DiagReport.bat

LastWriteTime : 10/06/2023 02:22:07
Length : 17214
Name : DiagReport.ps1

LastWriteTime : 10/06/2023 02:23:10
Length : 2440
Name : FixInstall.bat

LastWriteTime : 10/06/2023 01:50:10
Length : 53350
Name : install.log

LastWriteTime : 22/11/2022 16:25:50
Length : 11784
Name : LICENSE

LastWriteTime : 27/04/2023 10:51:38
Length : 12730
Name : npcap.cat

LastWriteTime : 27/04/2023 10:51:38
Length : 9004
Name : npcap.inf

LastWriteTime : 27/04/2023 10:51:38
Length : 78376
Name : npcap.sys

LastWriteTime : 27/04/2023 10:51:40
Length : 2436
Name : npcap_wfp.inf

LastWriteTime : 26/04/2023 18:54:54
Length : 308688
Name : NPFInstall.exe

LastWriteTime : 10/06/2023 11:16:58
Length : 102392
Name : NPFInstall.log

LastWriteTime : 27/04/2023 10:59:20
Length : 1083400
Name : Uninstall.exe

Path : C:\Program Files\Npcap\npcap.cat
Status : Valid
StatusMessage : Signature verified.
Thumbprint : 90A02C15F4084B1E787BA63FAC5045F8CF327BD6

Path : C:\Program Files\Npcap\npcap.inf
Status : Valid
StatusMessage : Signature verified.
Thumbprint : 90A02C15F4084B1E787BA63FAC5045F8CF327BD6

Path : C:\Program Files\Npcap\npcap.sys
Status : Valid
StatusMessage : Signature verified.
Thumbprint : 90A02C15F4084B1E787BA63FAC5045F8CF327BD6

Path : C:\Program Files\Npcap\NPFInstall.exe
Status : Valid
StatusMessage : Signature verified.
Thumbprint : 3C0D087ECDCC76D1084ABE00F1FEE5040400AE37

Path : C:\Program Files\Npcap\Uninstall.exe
Status : Valid
StatusMessage : Signature verified.
Thumbprint : 3C0D087ECDCC76D1084ABE00F1FEE5040400AE37

ls : Cannot find path 'C:\System32' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:116 char:1

  • ls ($env:Winls + "\System32") NpcapHelper.exe
  •   + CategoryInfo          : ObjectNotFound: (C:\System32\:String) [Get-ChildItem], ItemNotFoundException
      + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetChildItemCommand
    
    

ls : Cannot find path 'C:\System32' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:117 char:1

  • ls ($env:Winls + "\System32") Packet.dll
  •   + CategoryInfo          : ObjectNotFound: (C:\System32\:String) [Get-ChildItem], ItemNotFoundException
      + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetChildItemCommand
    
    

ls : Cannot find path 'C:\System32' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:118 char:1

  • ls ($env:Winls + "\System32") WlanHelper.exe
  •   + CategoryInfo          : ObjectNotFound: (C:\System32\:String) [Get-ChildItem], ItemNotFoundException
      + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetChildItemCommand
    
    

ls : Cannot find path 'C:\System32' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:119 char:1

  • ls ($env:Winls + "\System32") wpcap.dll
  •   + CategoryInfo          : ObjectNotFound: (C:\System32\:String) [Get-ChildItem], ItemNotFoundException
      + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetChildItemCommand
    
    

ls : Cannot find path 'C:\System32\Npcap' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:120 char:1

  • ls ($env:Winls + "\System32\Npcap")
  •   + CategoryInfo          : ObjectNotFound: (C:\System32\Npcap\:String) [Get-ChildItem], ItemNotFoundException
      + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetChildItemCommand
    
    

ls : Cannot find path 'C:\SysWOW64' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:124 char:5

  • ls ($env:Winls + "\SysWOW64\") NpcapHelper.exe
    
  • ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
    • CategoryInfo : ObjectNotFound: (C:\SysWOW64:String) [Get-ChildItem], ItemNotFoundException
    • FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetChildItemCommand

ls : Cannot find path 'C:\SysWOW64' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:125 char:5

  • ls ($env:Winls + "\SysWOW64\") Packet.dll
    
  • ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
    • CategoryInfo : ObjectNotFound: (C:\SysWOW64:String) [Get-ChildItem], ItemNotFoundException
    • FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetChildItemCommand

ls : Cannot find path 'C:\SysWOW64' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:126 char:5

  • ls ($env:Winls + "\SysWOW64\") WlanHelper.exe
    
  • ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
    • CategoryInfo : ObjectNotFound: (C:\SysWOW64:String) [Get-ChildItem], ItemNotFoundException
    • FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetChildItemCommand

ls : Cannot find path 'C:\SysWOW64' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:127 char:5

  • ls ($env:Winls + "\SysWOW64\") wpcap.dll
    
  • ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
    • CategoryInfo : ObjectNotFound: (C:\SysWOW64:String) [Get-ChildItem], ItemNotFoundException
    • FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetChildItemCommand
      ls : Cannot find path 'C:\SysWOW64\Npcap' because it does not exist.
      At C:\Program Files\Npcap\DiagReport.ps1:128 char:5
  • ls ($env:Winls + "\SysWOW64\Npcap\")
    
  • ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
    • CategoryInfo : ObjectNotFound: (C:\SysWOW64\Npcap:String) [Get-ChildItem], ItemNotFoundException
    • FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetChildItemCommand

WinPcap Info:


HKLM:\SOFTWARE\WOW6432Node\WinPcap:
Not present.


Registry Info:


HKLM:\SOFTWARE\WOW6432Node\Npcap:
AdminOnly : 1
WinPcapCompatible : 0
(default) : C:\Program Files\Npcap
HKLM:\SYSTEM\CurrentControlSet\Services\npcap:
Start : 1
HKLM:\SYSTEM\CurrentControlSet\Services\npcap\Parameters:
LoopbackSupport : 1
DltNull : 1
Edition : Npcap
AdminOnly : 1
Dot11Support : 1
VlanSupport : 0
WinPcapCompatible : 0
HKLM:\SYSTEM\CurrentControlSet\Services\npcap_wifi:
Type : 1
Start : 4
ErrorControl : 1
Tag : 30
ImagePath : \SystemRoot\system32\DRIVERS\npcap.sys
DisplayName : @oem44.inf,%NPF_Desc_WiFi%;Npcap Packet Driver (NPCAP) (Wi-Fi)
Group : NDIS
Description : @oem44.inf,%NPF_Desc_WiFi%;Npcap Packet Driver (NPCAP) (Wi-Fi)
HKLM:\SYSTEM\CurrentControlSet\Services\npf:
Not present.
HKLM:\SYSTEM\CurrentControlSet\Services\npf\Parameters:
Not present.
HKLM:\SYSTEM\CurrentControlSet\Services\npf_wifi:
Not present.


Service Info:


gsv : Cannot find any service with service name 'npcap'.
At C:\Program Files\Npcap\DiagReport.ps1:165 char:1

  • gsv npcap
  •   + CategoryInfo          : ObjectNotFound: (npcap:String) [Get-Service], ServiceCommandException
      + FullyQualifiedErrorId : NoServiceFoundForGivenName,Microsoft.PowerShell.Commands.GetServiceCommand
    
    

gsv : Cannot find any service with service name 'npf'.
At C:\Program Files\Npcap\DiagReport.ps1:166 char:1

  • gsv npf
  •   + CategoryInfo          : ObjectNotFound: (npf:String) [Get-Service], ServiceCommandException
      + FullyQualifiedErrorId : NoServiceFoundForGivenName,Microsoft.PowerShell.Commands.GetServiceCommand
    
    

Install Info:


Please refer to: C:\Program Files\Npcap\install.log
Important note:
Yes, i've modified the DiagReport.ps1 file, only adding aliases on it.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing install.log, NPFInstall.log, FixInstall.bat, and DiagReport.ps1, then compare the reported Npcap service and filter status with the Nmap failure. Reproduce the driver-start and Nmap scan behavior on the reported Windows 10 setup. Done means the Npcap driver starts successfully and Nmap can perform the requested scan.

Written by the indexing model from the issue text.

Assessment

Tech stack
c, powershell, shell
Domain
networking, operating-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.