Packetbeat: Packetbeat on Windows Server 2008, running but not logging

Maybe you can whitelist npcap with your AV program.