I am deploying Wireshark 1.6.8 into our user machines its installing silently well and good but to run wireahark it needs WinPCAP as well when I searched for silent installation of WinPCAP lot of info confusing me what exactly to follow could any one suggest me right method for deploying WinPCAP in silent mode.

Answer Summary:
Repackage the application (Reboot is must & two different msi's for x86,x64).
Cancel
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Community Chosen Answer

1

There is no silent installer for the free version of WinPCAP.  You will need to purchase the pro version if you wish to have a silent install.

http://www.winpcap.org/pipermail/winpcap-bugs/2011-January/001344.html

 

Answered 07/12/2012 by: hackajar
White Belt

Please log in to comment

Answers

0

hello ontari.ontari,
can u please give me the processor type where u wish to deploy the application . whether its an x86 or x64 system.
i would suggest use prism tool to check where the source installs the files that u have mentioned above. Also mere keeping the files there wont do. It needs to be registered and also a service needs to be started after registering the dll's, which, actually makes the wireshark run

Answered 07/09/2012 by: talonsprem87
Tenth Degree Black Belt

  • IMy package should work on both x86 and x64 OS... thats the requirement
Please log in to comment
0

I have packaged WireShark couple of times and would like to give you some tips:

1) Best is to capture the application. Different MSI for different processors. This is because the drivers are different for different processors. Took me a lot of time to figure out the first time I packaged it.

2) A reboot is required after you install your MSI to make the driver work. If you try to launch the shortcut after installation without reboot, it will fail.

 

Cheers,

Piyush

http://msiworld.blogspot.com

Answered 07/10/2012 by: piyushnasa
Red Belt

Please log in to comment
0
Round about way, I downloaded nmap which comes with winpcap, during the install of Nmap there's a winpcap-nmap-4.13.exe that's extracted to install directory of nmap. Took that wnipcap-nmap-4.13.exe and used /S switch and threw it into SCCM and called it a day.
Answered 07/11/2016 by: caldvn
Senior Yellow Belt

Please log in to comment
0

Do you mean WinPcap?

Answered 07/09/2012 by: SMal.tmcc
Red Belt

  • sry :(( yes it is "WinPcap_4_1_2.exe"
  • That is on my list for the CT classrooms. I should be to that room's image later today or early tomorrow, will let you know.
Please log in to comment
0

Hello, as far as WinPcap goes, I pacakged that application a few months back and to be very frank Winpcap no longer supports silent switch. the version that u have mentioned is the same that i packaged. After spending hours on looking for silent switch and ending up with nothing, i created my own MSI. But a word of caution for the same, you will be required to create two different MSI if you are planning to install it on x86 and x64 processors

Answered 07/09/2012 by: talonsprem87
Tenth Degree Black Belt

Please log in to comment
-1

Yes.. You have to repackage it..

Answered 07/09/2012 by: jagadeish
Red Belt

Please log in to comment
-1

Repackaged the application and working fine (Reboot is must & two different msi's for x86,x64). Thank you for the guidence. But I wonder the package with driver how it is possible to repackage?? 

Answered 07/13/2012 by: ontari.ontari
Black Belt

Please log in to comment
-1

There is some info here:

http://www.itninja.com/software/cace-technologies/winpcap/4-977

let me know if it helps, if not I will be working on that package later.

Answered 07/09/2012 by: SMal.tmcc
Red Belt

  • okay, I gave an attemp according to the above link, but no luck its still saying "The NPF driver isn't running"
    while dng I got this doubt after extraction Packet.dll has 4 difft versions (Packet_1.dll, 2, 3, 4) in that I opened properties and checked the details
    (Packet.dll- NT5) (Packet_1.dll- Vista) (Packet_2.dll- Vista) (Packet_3.dll- NT5) (Packet_4.dll- NT4) so here first i copied the (Packet.dll- NT5) but didnt work so tried with (Packet_1.dll- Vista) and the other Vista one both but no luck
    so do u have any idea which one exactly I ned to copy ???
    • I've fixed this via copy File and some Powershell stuff.
      I've bypass that issue.

      I've capture the wincap installation.

      For a 32bits app running on a x64 OS, I've make a condition on the nfp.sys file, in order to copy the x64 amd sys file.

      Then with a Custom Action, I created a service using SC DOS command.

      " sc create npf binPath= system32\drivers\npf.sys type= kernel start= auto error= normal tag= no DisplayName= " NetGroup Packet Filter Driver "

      I used Powershell my CA. VBS script should be also working.
Please log in to comment
Answer this question or Comment on this question for clarity