Wireshark WinPCAP Silent Install

I am deploying Wireshark 1.6.8 into our user machines its installing silently well and good but to run wireahark it needs WinPCAP as well when I searched for silent installation of WinPCAP lot of info confusing me what exactly to follow could any one suggest me right method for deploying WinPCAP in silent mode.

0 Comments   [ + ] Show comments

Answers (9)

Answer Summary:
Repackage the application (Reboot is must & two different msi's for x86,x64).
Posted by: hackajar 10 years ago
White Belt

There is no silent installer for the free version of WinPCAP.  You will need to purchase the pro version if you wish to have a silent install.



  • really good info to know thank you... - ontari.ontari 10 years ago
Posted by: caldvn 6 years ago
Senior Yellow Belt
Round about way, I downloaded nmap which comes with winpcap, during the install of Nmap there's a winpcap-nmap-4.13.exe that's extracted to install directory of nmap. Took that wnipcap-nmap-4.13.exe and used /S switch and threw it into SCCM and called it a day.
Posted by: talonsprem87 10 years ago
10th Degree Black Belt

hello ontari.ontari,
can u please give me the processor type where u wish to deploy the application . whether its an x86 or x64 system.
i would suggest use prism tool to check where the source installs the files that u have mentioned above. Also mere keeping the files there wont do. It needs to be registered and also a service needs to be started after registering the dll's, which, actually makes the wireshark run

  • IMy package should work on both x86 and x64 OS... thats the requirement - ontari.ontari 10 years ago
Posted by: piyushnasa 10 years ago
Red Belt

I have packaged WireShark couple of times and would like to give you some tips:

1) Best is to capture the application. Different MSI for different processors. This is because the drivers are different for different processors. Took me a lot of time to figure out the first time I packaged it.

2) A reboot is required after you install your MSI to make the driver work. If you try to launch the shortcut after installation without reboot, it will fail.





Posted by: SMal.tmcc 10 years ago
Red Belt

Do you mean WinPcap?

  • sry :(( yes it is "WinPcap_4_1_2.exe" - ontari.ontari 10 years ago
  • That is on my list for the CT classrooms. I should be to that room's image later today or early tomorrow, will let you know. - SMal.tmcc 10 years ago
Posted by: talonsprem87 10 years ago
10th Degree Black Belt

Hello, as far as WinPcap goes, I pacakged that application a few months back and to be very frank Winpcap no longer supports silent switch. the version that u have mentioned is the same that i packaged. After spending hours on looking for silent switch and ending up with nothing, i created my own MSI. But a word of caution for the same, you will be required to create two different MSI if you are planning to install it on x86 and x64 processors

Posted by: jagadeish 10 years ago
Red Belt

Yes.. You have to repackage it..

Posted by: ontari.ontari 10 years ago
Black Belt

Repackaged the application and working fine (Reboot is must & two different msi's for x86,x64). Thank you for the guidence. But I wonder the package with driver how it is possible to repackage?? 

Posted by: SMal.tmcc 10 years ago
Red Belt

There is some info here:


let me know if it helps, if not I will be working on that package later.

  • okay, I gave an attemp according to the above link, but no luck its still saying "The NPF driver isn't running"
    while dng I got this doubt after extraction Packet.dll has 4 difft versions (Packet_1.dll, 2, 3, 4) in that I opened properties and checked the details
    (Packet.dll- NT5) (Packet_1.dll- Vista) (Packet_2.dll- Vista) (Packet_3.dll- NT5) (Packet_4.dll- NT4) so here first i copied the (Packet.dll- NT5) but didnt work so tried with (Packet_1.dll- Vista) and the other Vista one both but no luck
    so do u have any idea which one exactly I ned to copy ??? - ontari.ontari 10 years ago
    • I've fixed this via copy File and some Powershell stuff.
      I've bypass that issue.

      I've capture the wincap installation.

      For a 32bits app running on a x64 OS, I've make a condition on the nfp.sys file, in order to copy the x64 amd sys file.

      Then with a Custom Action, I created a service using SC DOS command.

      " sc create npf binPath= system32\drivers\npf.sys type= kernel start= auto error= normal tag= no DisplayName= " NetGroup Packet Filter Driver "

      I used Powershell my CA. VBS script should be also working. - Mic 8 years ago

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ