T O P I C R E V I E W |
LorenAmelang |
Posted - 12 May 2019 : 01:47:05 I've used PerfMon since WinXP, never seen anything like this!
Yesterday I added an additional USB Wi-Fi adapter, and re-installed the latest Npcap to work with it. Pretty sure PerfMon was still working after that. But today it shows no net activity and "0 interfaces". In Settings it shows tons of interfaces - all of them virtual miniport or loopback adapters.
After about 40 of them repeating in the dropdown, it gets to: Software Loopback Interface 1 Software Loopback Interface Software Loopback Interface Software Loopback Interfac Software Loopback Interfa Software Loopback Interf Software Loopback Inter Software Loopback Inte and so on until the line has only the first 'S'. Never finds my actual Wi-Fi, though I'm obviously using it to type this.
I've uninstalled PerfMon, deleted its registry keys, reinstalled the latest Performance Monitor 4.1.3, and it just keeps doing this. The order of interfaces in the list changed, but the content didn't.
Windows finds a few of the listed interfaces, but not nearly all of them:
C:\Users\loren>ipconfig |findstr "adapter" Ethernet adapter Ethernet 3: Ethernet adapter Ethernet 4: Ethernet adapter Ethernet 5: Wireless LAN adapter Local Area Connection* 3: Wireless LAN adapter Local Area Connection* 6: Wireless LAN adapter Wi-Fi: Ethernet adapter Bluetooth Network Connection:
C:\Users\loren>wmic nicconfig [00000000] Microsoft Kernel Debug Network Adapter [00000001] Marvell AVASTAR Wireless-AC Network Controller [00000002] Microsoft Wi-Fi Direct Virtual Adapter [00000003] Bluetooth Device (RFCOMM Protocol TDI) [00000004] Bluetooth Device (Personal Area Network) [00000005] Microsoft Wi-Fi Direct Virtual Adapter [00000006] WAN Miniport (SSTP) [00000007] WAN Miniport (IKEv2) [00000008] WAN Miniport (L2TP) [00000009] WAN Miniport (PPTP) [00000010] WAN Miniport (PPPOE) [00000011] WAN Miniport (IP) [00000012] WAN Miniport (IPv6) [00000013] WAN Miniport (Network Monitor) [00000014] Microsoft KM-TEST Loopback Adapter [00000015] Linksys WUSB6300 [00000016] Microsoft KM-TEST Loopback Adapter [00000017] Microsoft KM-TEST Loopback Adapter
PS C:\Program Files (x86)> Get-NetIPInterface
ifIndex InterfaceAlias AddressFamily ------- -------------- ------------- 17 Ethernet 5 IPv6 19 Ethernet 4 IPv6 27 Ethernet 3 IPv6 23 Local Area Connection* 6 IPv6 4 Local Area Connection* 3 IPv6 1 Loopback Pseudo-Interface 1 IPv6 16 Bluetooth Network Connection IPv6 17 Ethernet 5 IPv4 19 Ethernet 4 IPv4 27 Ethernet 3 IPv4 23 Local Area Connection* 6 IPv4 4 Local Area Connection* 3 IPv4 1 Loopback Pseudo-Interface 1 IPv4 16 Bluetooth Network Connection IPv4 25 Wi-Fi IPv4
Wireshark finds that same list, plus Local Area Connection 12, 13, and 14...
What is PerfMon using to query for interfaces? Is there some limit on how many it can cope with? (It used to report around 36 when I'd mouse over it.) How can I get it back to seeing my actual Wi-Fi?
Happy to check further... Any clues appreciated!
Loren
|
3 L A T E S T R E P L I E S (Newest First) |
s.dav |
Posted - 29 May 2019 : 11:47:44 Hi Loren,
the PerfMon application uses the "GetIfTable" api of the Windows Lib "IPHlpApi" to obtain NET interfaces information
https://docs.microsoft.com/en-us/windows/desktop/api/Iphlpapi/nf-iphlpapi-getiftable
Bye, Davide |
s.dav |
Posted - 28 May 2019 : 16:30:28 Hi Loren,
this evening I'll check what API I'm calling for obtaining available net interfaces and let you know
Bye, Davide |
LorenAmelang |
Posted - 25 May 2019 : 02:55:29 It is working again! Full story is in: https://github.com/nmap/nmap/issues/589
dmiller-nmap commented on Oct 12, 2018 This issue refers to older releases of Npcap. If the same issue persists in recent releases, please follow this procedure:
Install the latest Npcap release from https://npcap.org/#download In the Npcap installation directory (usually C:\Program Files\Npcap), run the FixInstall.bat script as administrator: right-click -> Run as Administrator. This should leave you with a correctly-installed Npcap with no extra Loopback Adapters. When Npcap is upgraded or uninstalled, the Loopback Adapter will be removed as well.
If you follow this procedure with the latest Npcap release and still have problems, please open a new issue according to the instructions in the Npcap Guide: https://nmap.org/npcap/guide/npcap-users-guide.html#npcap-issues
I found this interesting because of my problem with Hexagora PerfMon 4 not being able to find my actual Wi-Fi adapter: http://www.hexagora.com/forum/topic.asp?TOPIC_ID=2516
Yesterday I added an additional USB Wi-Fi adapter, and re-installed the latest Npcap to work with it. Pretty sure PerfMon was still working after that. But today it shows no net activity and "0 interfaces". In Settings it shows tons of interfaces - all of them virtual miniport or loopback adapters.
After about 40 of them repeating in the dropdown, it gets to: Software Loopback Interface 1 Software Loopback Interface Software Loopback Interface Software Loopback Interfac Software Loopback Interfa Software Loopback Interf Software Loopback Inter Software Loopback Inte and so on until the line has only the first 'S'. Never finds my actual Wi-Fi, though I'm obviously using it to type this.
I've uninstalled PerfMon, deleted its registry keys, reinstalled the latest Performance Monitor 4.1.3, and it just keeps doing this. The order of interfaces in the list changed, but the content didn't.
Windows finds a few of the listed interfaces, but not nearly all of them...
Today when I checked in Windows there were 3 Npcap Loopback Adpters, 3, 4, 5, the ones that fill the system log with "no DHCP" errors, and clutter the PerfMon4 adapter list. I eventually deleted them from devmgr.
PS C:\Program Files\Npcap> ./CheckStatus.bat Npcap Loopback Adapter Ethernet 3 Npcap Loopback Adapter Ethernet 5 Npcap Loopback Adapter Ethernet 4
PS C:\Program Files\Npcap> ./FixInstall.bat Dot11Support = 0x1 LoopbackSupport = 0x1 WinPcapCompatible = 0x0 NPCAP_DIR = "C:\Program Files\Npcap"
The Npcap Packet Driver (NPCAP) service was stopped successfully.
[SC] ChangeServiceConfig SUCCESS The Npcap Packet Driver (NPCAP) (Wi-Fi) service is not started.
More help is available by typing NET HELPMSG 3521.
[SC] ChangeServiceConfig SUCCESS ROOT\NET\0002 : Removed Npcap Loopback adapter has been successfully uninstalled! Npcap Loopback adapter has been successfully installed! [SC] OpenService FAILED 5:
Access is denied.
The requested service has already been started.
More help is available by typing NET HELPMSG 2182.
The Npcap Packet Driver (NPCAP) service was started successfully.
The bindings of Npcap driver (with Wi-Fi support) have been successfully restarted!
PS C:\Program Files\Npcap> ./CheckStatus.bat Npcap Loopback Adapter Ethernet 3 Npcap Loopback Adapter Ethernet 5 Npcap Loopback Adapter Ethernet 4
PS C:\Program Files\Npcap> ncpa.cpl [Deleted three adapters]
PS C:\Program Files\Npcap> ./CheckStatus.bat Dot11Support = 0x1 LoopbackSupport = 0x1 WinPcapCompatible = 0x0 NPCAP_DIR = "C:\Program Files\Npcap"
The Npcap Packet Driver (NPCAP) service was stopped successfully.
[SC] ChangeServiceConfig SUCCESS The Npcap Packet Driver (NPCAP) (Wi-Fi) service is not started.
More help is available by typing NET HELPMSG 3521.
[SC] ChangeServiceConfig SUCCESS Npcap Loopback adapter has been successfully uninstalled! Npcap Loopback adapter has been successfully installed! [SC] OpenService FAILED 5:
Access is denied.
The requested service has already been started.
More help is available by typing NET HELPMSG 2182.
The Npcap Packet Driver (NPCAP) service was started successfully.
The bindings of Npcap driver (with Wi-Fi support) have been successfully restarted! PS C:\Program Files\Npcap>
PerfMon4 is now working! Shows "62 interfaces". The list shows all the previous Npcap Loopback Adapters plus more variations of them, and still shows the final name losing one char from the end until it is just an 'S' - but the display works!
My Surface Book has no ethernet at all, one internal Wi-Fi adapter, and traces of a USB Wi-Fi adapter that has been connected in the past. Why do these "Npcap Loopback Adapter Ethernet 3/4/5/? adapters keep appearing?
If they have some purpose, is there a way to keep them from filling my Windows System log with hundred of DHCP errors per day?
Any idea why deleting them would make PerfMon4 work again?
|
|
|