In this part of Packetbeat's FAQ section, Npcap is mentioned to be an alternative to WinPcap. I tried running Packetbeat after installing Npcap, but still hit the error "The program can't start because wpcap.dll is missing from your computer"
Npcap has a "WinPCap compatibility mode" that should do the trick, but I'm having a little trouble determining how to use that setting during a silent install process.
It'd be much easier if Packetbeat would be able to use Npcap directly. Given Npcap is mentioned as an alternative in the FAQ, is there a way to have Packetbeat use it directly that I'm not aware of?
Hey @andrewkroh, I tried that, it doesn't seem to work for me. It only runs if I check off "Install Ncap in WinPcap API-Compatible mode" in the Npcap GUI installer, or install via the commandline with: npcap-0.86.exe /S /winpcap_mode=yes
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.