running wireshark command line as administrator

The setup process of Wireshark will install WinPcap for you.

This is WinPcap, which is the underlying service that assists in capturing packets. One element of the Wireshark suite of programs does need administrator network privileges. This is because as far as the network procedures of your computer are concerned, Wireshark is only acting the way any other program that connects to the network would behave ‒ the Wireshark system only needs access to the network, which is available to all regular users, not just the administrator. Surprisingly, in Windows, you do not need to run Wireshark with administrator network privileges to give the program access to network functions. There are many possible reasons for this problem. When Wireshark reports that it cannot find any “interfaces”, it means that it could not detect any networks. Interface error caused by access permissions So, if Wireshark can’t find any networks at all, you can’t progress to the packet capture phase. To capture network traffic packets, you first need to select one of these networks. The error message appears in the area of the application window where you would expect to see a list of available networks. On the initial scan, if the program cannot find any networks attached to the computer on which it is running, it will show the message “ No interfaces found.” Towards the end of its startup procedures, Wireshark scans the host computer for network connections. When you start up Wireshark to capture network packets, the tool has to go through a series of initialization routines. “There are no interfaces on which a capture can be done.”

Running wireshark command line as administrator