NPCAP v0.9990 blocks vmware network stack after wakeup #106

zdm · 2020-04-19T06:08:05Z

After installing v0.9990 i found strange issue, that was gone, after I uninstalled npcap.

If I put computer to sleep and wakeup - local vmware network become disabled until I perform full reboot. Disabled means that all running workstation how no network access, don't see network adapters.

dmiller-nmap · 2020-04-21T19:20:24Z

Thanks for the report. What version of Windows are you using? Can you provide output from DiagReport?

zdm · 2020-04-21T20:02:42Z

latest windows 10 x64

*************************************************
DiagReport for Npcap ( http://npcap.org )
*************************************************
Script Architecture:		64-bit
Script Path:			C:\Program Files\Npcap\DiagReport.ps1
Current Time:			04/21/2020 23:01:44
Npcap install path:		C:\Program Files\Npcap
Npcap Version:			0.9990
PowerShell Version:		5.1.18362.752


*************************************************
OS Info:
*************************************************


Caption                 : Microsoft Windows 10 Pro
BuildNumber             : 18363
Locale                  : 0419
MUILanguages            : {en-US}
OSArchitecture          : 64-bit
ServicePackMajorVersion : 0
ServicePackMinorVersion : 0
SystemDirectory         : C:\Windows\system32
Version                 : 10.0.18363





*************************************************
CPU Info:
*************************************************


Name                      : Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz
Manufacturer              : GenuineIntel
DeviceID                  : CPU0
NumberOfCores             : 4
NumberOfEnabledCore       : 4
NumberOfLogicalProcessors : 8
Addresswidth              : 64





*************************************************
Memory Info:
*************************************************
Size:				8094 MB (8486752256 Bytes)


*************************************************
Network Adapter(s) Info:
*************************************************

Name                      InterfaceDescription                    ifIndex Status       MacAddress             LinkSpeed
----                      --------------------                    ------- ------       ----------             ---------
Ethernet                  Realtek PCIe GbE Family Controller           17 Disconnected 8C-16-45-75-8F-66          0 bps
Wi-Fi                     Intel(R) Dual Band Wireless-AC 3165          16 Up           34-41-5D-CC-2A-A9       150 Mbps
VMware Network Adapte...8 VMware Virtual Ethernet Adapter for ...      15 Up           00-50-56-C0-00-08       100 Mbps
TAP-2                     TAP-Windows Adapter V9 nmap/nmap#2                    12 Disconnected 00-FF-7A-B4-5C-73         1 Gbps
TAP-1                     TAP-Windows Adapter V9                       11 Disconnected 00-FF-6E-12-65-ED         1 Gbps
VMware Network Adapte...1 VMware Virtual Ethernet Adapter for ...      10 Up           00-50-56-C0-00-01       100 Mbps




Caption         : [00000001] Intel(R) Dual Band Wireless-AC 3165
GUID            : {BC544C40-1D55-40B8-9D43-961BADB471E5}
Index           : 1
InterfaceIndex  : 16
Manufacturer    : Intel Corporation
NetConnectionID : Wi-Fi
PNPDeviceID     : PCI\VEN_8086&DEV_3166&SUBSYS_42108086&REV_99\34415DFFFFCC2AA900

Caption         : [00000002] Realtek PCIe GbE Family Controller
GUID            : {BE830E7F-A1E4-426A-A14C-CF1D527B2B21}
Index           : 2
InterfaceIndex  : 17
Manufacturer    : Realtek
NetConnectionID : Ethernet
PNPDeviceID     : PCI\VEN_10EC&DEV_8168&SUBSYS_506817AA&REV_10\01000000684CE00000

Caption         : [00000012] VMware Virtual Ethernet Adapter for VMnet1
GUID            : {61E91C75-763D-4146-996B-A639BF3462E9}
Index           : 12
InterfaceIndex  : 10
Manufacturer    : VMware, Inc.
NetConnectionID : VMware Network Adapter VMnet1
PNPDeviceID     : ROOT\VMWARE\0000

Caption         : [00000014] VMware Virtual Ethernet Adapter for VMnet8
GUID            : {BBF20B63-480C-41F5-8A6E-A2DFF178C469}
Index           : 14
InterfaceIndex  : 15
Manufacturer    : VMware, Inc.
NetConnectionID : VMware Network Adapter VMnet8
PNPDeviceID     : ROOT\VMWARE\0001

Caption         : [00000016] TAP-Windows Adapter V9
GUID            : {6E1265ED-E470-4301-89AE-50E56243479D}
Index           : 16
InterfaceIndex  : 11
Manufacturer    : TAP-Windows Provider V9
NetConnectionID : TAP-1
PNPDeviceID     : ROOT\NET\0000

Caption         : [00000017] TAP-Windows Adapter V9
GUID            : {7AB45C73-B264-4309-8092-5F94277B875E}
Index           : 17
InterfaceIndex  : 12
Manufacturer    : TAP-Windows Provider V9
NetConnectionID : TAP-2
PNPDeviceID     : ROOT\NET\0001





*************************************************
NDIS Light-Weight Filter (LWF) Info:
*************************************************


InstallTimeStamp : {221, 7, 12, 0...}
Characteristics  : 262144
ComponentId      : ms_bridge
Description      : @%SystemRoot%\system32\bridgeres.dll,-2
InfPath          : netbrdg.inf
InfSection       : Install
LocDescription   : @%SystemRoot%\system32\bridgeres.dll,-2

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics  : 262184
ComponentId      : ms_wfplwf_lower
Description      : @%windir%\System32\drivers\wfplwfs.sys,-6006
InfPath          : wfplwfs.inf
InfSection       : WfpLwf_Lower_Install
LocDescription   : @%windir%\System32\drivers\wfplwfs.sys,-6006

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics  : 40
ComponentId      : ms_netbios
Description      : @%windir%\system32\drivers\netbios.sys,-501
InfPath          : netnb.inf
InfSection       : NetBIOS.ndi
LocDescription   : @%windir%\system32\drivers\netbios.sys,-501

InstallTimeStamp : {228, 7, 3, 0...}
Characteristics  : 16512
ComponentId      : vmware_bridge
Description      : @oem23.inf,%vmware_desc%;VMware Bridge Protocol
InfPath          : oem23.inf
InfSection       : VMnetBridge.Install
LocDescription   : @oem23.inf,%vmware_desc%;VMware Bridge Protocol

InstallTimeStamp : {221, 7, 12, 0...}
ComponentId      : ms_server
Description      : @%systemroot%\system32\srvsvc.dll,-109
InfPath          : Netserv.inf
InfSection       : Install.ndi
LocDescription   : @%systemroot%\system32\srvsvc.dll,-109

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics  : 262184
ComponentId      : ms_vwifi
Description      : @%windir%\System32\drivers\vwififlt.sys,-105
InfPath          : netvwififlt.inf
InfSection       : Install
LocDescription   : @%windir%\System32\drivers\vwififlt.sys,-105

InstallTimeStamp : {228, 7, 4, 0...}
Characteristics  : 262144
ComponentId      : INSECURE_NPCAP
Description      : @oem38.inf,%npf_desc_standard%;Npcap Packet Driver (NPCAP)
InfPath          : oem38.inf
InfSection       : FilterStandard
LocDescription   : @oem38.inf,%npf_desc_standard%;Npcap Packet Driver (NPCAP)

InstallTimeStamp : {228, 7, 4, 0...}
Characteristics  : 262144
ComponentId      : INSECURE_NPCAP_WIFI
Description      : @oem38.inf,%npf_desc_wifi%;Npcap Packet Driver (NPCAP) (Wi-Fi)
InfPath          : oem38.inf
InfSection       : FilterWiFi
LocDescription   : @oem38.inf,%npf_desc_wifi%;Npcap Packet Driver (NPCAP) (Wi-Fi)

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics  : 262144
ComponentId      : ms_pacer
Description      : @%windir%\System32\drivers\pacer.sys,-101
InfPath          : netpacer.inf
InfSection       : Install
LocDescription   : @%windir%\System32\drivers\pacer.sys,-101

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics  : 262184
ComponentId      : ms_wfplwf_upper
Description      : @%windir%\System32\drivers\wfplwfs.sys,-6005
InfPath          : wfplwfs.inf
InfSection       : WfpLwf_Upper_Install
LocDescription   : @%windir%\System32\drivers\wfplwfs.sys,-6005

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics  : 262184
ComponentId      : ms_nativewifip
Description      : @%windir%\System32\drivers\nwifi.sys,-101
InfPath          : netnwifi.inf
InfSection       : MS_NWIFI.Install
LocDescription   : @%windir%\System32\drivers\nwifi.sys,-101

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics  : 262144
ComponentId      : ms_wfplwf_vswitch
Description      : @%windir%\System32\drivers\wfplwfs.sys,-6004
InfPath          : wfplwfs.inf
InfSection       : WfpLwf_vSwitch_Install
LocDescription   : @%windir%\System32\drivers\wfplwfs.sys,-6004

InstallTimeStamp : {221, 7, 12, 0...}
Characteristics  : 262200
ComponentId      : ms_ndiscap
Description      : @%windir%\System32\drivers\ndiscap.sys,-5000
InfPath          : ndiscap.inf
InfSection       : Install
LocDescription   : @%windir%\System32\drivers\ndiscap.sys,-5000





*************************************************
File Info:
*************************************************


    Directory: C:\Program Files\Npcap


Mode                LastWriteTime         Length Name                                                                  
----                -------------         ------ ----                                                                  
-a----        4/30/2019   8:59 PM            862 CheckStatus.bat                                                       
-a----        4/21/2020  11:01 PM              0 DiagReport-20200421-230144.txt                                        
-a----        9/24/2019   8:43 PM           1042 DiagReport.bat                                                        
-a----        9/30/2019   8:11 PM           9142 DiagReport.ps1                                                        
-a----         1/9/2020   3:42 AM           2444 FixInstall.bat                                                        
-a----        4/21/2020  11:01 PM           9426 install.log                                                           
-a----        6/10/2019   9:58 PM          10087 LICENSE                                                               
-a----         4/4/2020   3:52 AM          10918 npcap.cat                                                             
-a----         4/4/2020   3:52 AM           8657 npcap.inf                                                             
-a----         4/4/2020   3:52 AM          69744 npcap.sys                                                             
-a----         4/4/2020   2:13 AM           2404 npcap_wfp.inf                                                         
-a----         4/4/2020   2:14 AM         259672 NPFInstall.exe                                                        
-a----        4/21/2020  11:01 PM          16051 NPFInstall.log                                                        
-a----         4/4/2020   3:57 AM         261720 Uninstall.exe                                                         


    Directory: C:\Windows\System32\Npcap


Mode                LastWriteTime         Length Name                                                                  
----                -------------         ------ ----                                                                  
-a----         4/4/2020   2:14 AM         102488 NpcapHelper.exe                                                       
-a----         4/4/2020   2:14 AM         179800 Packet.dll                                                            
-a----         4/4/2020   2:14 AM          65624 WlanHelper.exe                                                        
-a----         4/4/2020   2:14 AM         434264 wpcap.dll                                                             


    Directory: C:\Windows\SysWOW64\Npcap


Mode                LastWriteTime         Length Name                                                                  
----                -------------         ------ ----                                                                  
-a----         4/4/2020   2:14 AM          89176 NpcapHelper.exe                                                       
-a----         4/4/2020   2:14 AM         154712 Packet.dll                                                            
-a----         4/4/2020   2:14 AM          55384 WlanHelper.exe                                                        
-a----         4/4/2020   2:14 AM         377944 wpcap.dll                                                             


*************************************************
WinPcap Info:
*************************************************
HKLM:\SOFTWARE\WOW6432Node\WinPcap:
Get-ItemProperty : Cannot find path 'HKLM:\SOFTWARE\WOW6432Node\WinPcap' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:170 char:6
+     (Get-ItemProperty HKLM:\SOFTWARE\WOW6432Node\WinPcap | out-string ...
+      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (HKLM:\SOFTWARE\WOW6432Node\WinPcap:String) [Get-ItemProperty], ItemNotF 
   oundException
    + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetItemPropertyCommand
 


*************************************************
Registry Info:
*************************************************
HKLM:\SOFTWARE\WOW6432Node\Npcap:


AdminOnly         : 0
WinPcapCompatible : 0
(default)         : C:\Program Files\Npcap



HKLM:\SYSTEM\CurrentControlSet\Services\npcap:


Type               : 1
Start              : 1
ErrorControl       : 1
Tag                : 28
ImagePath          : \SystemRoot\system32\DRIVERS\npcap.sys
DisplayName        : @oem38.inf,%NPF_Desc_Standard%;Npcap Packet Driver (NPCAP)
Group              : NDIS
Description        : @oem38.inf,%NPF_Desc_Standard%;Npcap Packet Driver (NPCAP)
NdisMajorVersion   : 6
NdisMinorVersion   : 1
DriverMajorVersion : 0
DriverMinorVersion : 45



HKLM:\SYSTEM\CurrentControlSet\Services\npcap\Parameters:


NdisImPlatformBindingOptions : 0
DefaultFilterSettings        : 1
LoopbackSupport              : 1
DltNull                      : 1
Edition                      : Npcap
AdminOnly                    : 0
Dot11Support                 : 1
VlanSupport                  : 0
WinPcapCompatible            : 0
Dot11Adapters                : \Device\{bc544c40-1d55-40b8-9d43-961badb471e5}



HKLM:\SYSTEM\CurrentControlSet\Services\npcap_wifi:


Start              : 4
Type               : 1
ErrorControl       : 1
Tag                : 29
ImagePath          : \SystemRoot\system32\DRIVERS\npcap.sys
DisplayName        : @oem38.inf,%NPF_Desc_WiFi%;Npcap Packet Driver (NPCAP) (Wi-Fi)
Group              : NDIS
Description        : @oem38.inf,%NPF_Desc_WiFi%;Npcap Packet Driver (NPCAP) (Wi-Fi)
NdisMajorVersion   : 6
NdisMinorVersion   : 1
DriverMajorVersion : 0
DriverMinorVersion : 45



HKLM:\SYSTEM\CurrentControlSet\Services\npcap_wifi\Parameters:


NdisImPlatformBindingOptions : 0
DefaultFilterSettings        : 1



HKLM:\SYSTEM\CurrentControlSet\Services\npf:
Get-ItemProperty : Cannot find path 'HKLM:\SYSTEM\CurrentControlSet\Services\npf' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:201 char:2
+ (Get-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Services\npf | out-s ...
+  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (HKLM:\SYSTEM\Cu...et\Services\npf:String) [Get-ItemProperty], ItemNotFo 
   undException
    + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetItemPropertyCommand
 
HKLM:\SYSTEM\CurrentControlSet\Services\npf\Parameters:
Get-ItemProperty : Cannot find path 'HKLM:\SYSTEM\CurrentControlSet\Services\npf\Parameters' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:203 char:2
+ (Get-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Services\npf\Paramet ...
+  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (HKLM:\SYSTEM\Cu...\npf\Parameters:String) [Get-ItemProperty], ItemNotFo 
   undException
    + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetItemPropertyCommand
 
HKLM:\SYSTEM\CurrentControlSet\Services\npf_wifi:
Get-ItemProperty : Cannot find path 'HKLM:\SYSTEM\CurrentControlSet\Services\npf_wifi' because it does not exist.
At C:\Program Files\Npcap\DiagReport.ps1:205 char:2
+ (Get-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Services\npf_wifi |  ...
+  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (HKLM:\SYSTEM\Cu...rvices\npf_wifi:String) [Get-ItemProperty], ItemNotFo 
   undException
    + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetItemPropertyCommand
 
HKLM:\SYSTEM\CurrentControlSet\Services\npf_wifi\Parameters:
Get-ItemProperty : Cannot find path 'HKLM:\SYSTEM\CurrentControlSet\Services\npf_wifi\Parameters' because it does not 
exist.
At C:\Program Files\Npcap\DiagReport.ps1:207 char:2
+ (Get-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Services\npf_wifi\Pa ...
+  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (HKLM:\SYSTEM\Cu...wifi\Parameters:String) [Get-ItemProperty], ItemNotFo 
   undException
    + FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetItemPropertyCommand
 


*************************************************
Service Info:
*************************************************

Status      : Running
Name        : npcap
DisplayName : Npcap Packet Driver (NPCAP)

Get-Service : Cannot find any service with service name 'npf'.
At C:\Program Files\Npcap\DiagReport.ps1:217 char:1
+ Get-Service npf
+ ~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (npf:String) [Get-Service], ServiceCommandException
    + FullyQualifiedErrorId : NoServiceFoundForGivenName,Microsoft.PowerShell.Commands.GetServiceCommand
 


*************************************************
Install Info:
*************************************************
Please refer to: C:\Program Files\Npcap\install.log

CreateDirectory: "C:\Program Files\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 10087 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1042 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 9142 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2444 to "C:\Program Files\Npcap\FixInstall.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 259672 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 906
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 69744 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 10918 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 8657 to "C:\Program Files\Npcap\npcap.inf"
Jump: 916
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2404 to "C:\Program Files\Npcap\npcap_wfp.inf"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 261720 to "C:\Program Files\Npcap\Uninstall.exe"
detailprint: Installing NDIS6.x x64 driver for Win7, Win8 and Win10
Call: 861
Jump: 873
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 377944 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 154712 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 89176 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 55384 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1269
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\System.dll"
File: skipped: "C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\System.dll" (overwriteflag=1)
Call: 878
Jump: 890
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 434264 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 179800 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 102488 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 65624 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 971
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000000"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1269
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\System.dll"
File: skipped: "C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 642
Call: 917
Call: 1269
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\nsExec.dll"
File: wrote 15520 to "C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\nsExec.dll"
detailprint: The cache in driver store was cleared
Call: 1269
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\nsExec.dll"
File: skipped: "C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\nsExec.dll" (overwriteflag=1)
Call: 1269
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\nsExec.dll"
File: skipped: "C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\nsExec.dll" (overwriteflag=1)
Jump: 965
detailprint: The npcap service for Win7, Win8 and Win10 was successfully created
Jump: 971
detailprint: Writing service options to registry
Call: 1005
Call: 982
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "LoopbackSupport"="0x00000001"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "DltNull"="0x00000001"
WriteRegStr: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "Edition"="Npcap"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "Dot11Support"="0x00000001"
Jump: 995
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "VlanSupport"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "WinPcapCompatible"="0x00000000"
detailprint: Identify the wireless adapters and write them into the registry
Call: 1269
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\nsExec.dll"
File: skipped: "C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\nsExec.dll" (overwriteflag=1)
Call: 1075
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "Start"="0x00000004"
Call: 1043
detailprint: Starting the npcap driver
Call: 1269
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\SimpleSC.dll"
File: skipped: "C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\SimpleSC.dll" (overwriteflag=1)
Call: 1269
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\SimpleSC.dll"
File: skipped: "C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\SimpleSC.dll" (overwriteflag=1)
Call: 1269
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\SimpleSC.dll"
File: skipped: "C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\SimpleSC.dll" (overwriteflag=1)
Jump: 1239
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayName"="Npcap"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayVersion"="0.9990"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "Publisher"="Nmap Project"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLInfoAbout"="https://www.npcap.org"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLUpdateInfo"="https://www.npcap.org"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMajor"="0"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMinor"="9990"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoModify"="0x00000001"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoRepair"="0x00000001"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="CheckStatus.bat"
File: wrote 862 to "C:\Program Files\Npcap\CheckStatus.bat"
Call: 1269
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\nsExec.dll"
File: skipped: "C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\nsExec.dll" (overwriteflag=1)
Jump: 59
Call: 1269
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\InstallOptions.dll"
File: skipped: "C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\InstallOptions.dll" (overwriteflag=1)
Delete: DeleteFile("C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\final.ini")
Delete: DeleteFile("C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\InstallOptions.dll")
Delete: DeleteFile("C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\modern-header.bmp")
Delete: DeleteFile("C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\options.ini")
Delete: DeleteFile("C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\SimpleSC.dll")
Delete: DeleteFile("C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\zdm\AppData\Local\Temp\nseD44C.tmp\")

zdm · 2020-05-05T06:12:43Z

Same problem in v0.9991

dmiller-nmap · 2020-05-05T18:16:40Z

Thanks for the update. Has any older version of Npcap worked without this problem? Which version?

zdm · 2020-05-05T18:18:32Z

0.9989 works

…

On 05.05.2020 21:16, Daniel Miller wrote: Thanks for the update. Has any older version of Npcap worked without this problem? Which version? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <https://github.com/nmap/nmap/issues/2018#issuecomment-624222596>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAH2MSAC2EFP5GVQ6SKLXSDRQBJZNANCNFSM4MLVALEA>.

zdm · 2020-06-04T21:02:25Z

v09992 - still break vmware.

zdm · 2020-08-26T10:19:10Z

Guys, latest version that doesn't blocks vmware after wakeup is v0.9989.
How can I help to fix this problem?

dmiller-nmap · 2020-08-26T21:32:40Z

@zdm Thanks for the update. Does this mean you have tried Npcap 0.9997? What version of VMWare are you using? Is Npcap installed in a guest VM or on the hypervisor system?

zdm · 2020-08-27T03:35:15Z

Yes, of course, I trying each new version in hope, that it will work. ;-)
VMWare workstation pro 15.5.6.
Npcap installed on hypervisor (latest windows 10).

vanc · 2021-01-11T17:40:44Z

The issue affected a lot of VMware users.
https://communities.vmware.com/t5/VMware-Workstation-Pro/After-sleep-w10-host-can-not-ping-guests-vmware-workstation-pro/m-p/2822017/emcs_t/S2h8ZW1haWx8dG9waWNfc3Vic2NyaXB0aW9ufEtKU1QxNjgwRExKWDNBfDI4MjIwMTd8U1VCU0NSSVBUSU9OU3xoSw

kong62 · 2021-01-27T14:27:46Z

Same problem

Previous behavior would only pass along filters that added new bits (filters) to the current filter set, without considering whether some bits were set only by the old HigherPacketFilter. Possibly related to #106, since this code was one of few changes in v0.9990.

vanc · 2021-03-11T18:50:16Z

I can confirm the latest version 1.20 fixed the issue. After upgrade from v0.9989 which was the last known good one, I tried the normal reproduction steps (sleep, wake up), and the VM adapters are still reachable. No disable/enable workaround needed.

zdm · 2021-03-12T05:28:22Z

yes, 1.20 works for me

dmiller-nmap · 2021-03-13T23:43:16Z

Thanks everyone for confirming Npcap 1.20 fixes the issue. The issue was related to hardware packet filters being altered by Npcap and not restored when it closed. The commit that fixed the issue was 7ea7deb.

fyodor transferred this issue from nmap/nmap May 20, 2020

dmiller-nmap closed this as completed Mar 13, 2021

dmiller-nmap added a commit that referenced this issue Mar 15, 2021

Confirm fix for #106 in changelog

59c5263

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

NPCAP v0.9990 blocks vmware network stack after wakeup #106

NPCAP v0.9990 blocks vmware network stack after wakeup #106

zdm commented Apr 19, 2020

dmiller-nmap commented Apr 21, 2020

zdm commented Apr 21, 2020

zdm commented May 5, 2020 •

edited

dmiller-nmap commented May 5, 2020

zdm commented May 5, 2020 via email

zdm commented Jun 4, 2020

zdm commented Aug 26, 2020

dmiller-nmap commented Aug 26, 2020

zdm commented Aug 27, 2020

vanc commented Jan 11, 2021

kong62 commented Jan 27, 2021

vanc commented Mar 11, 2021

zdm commented Mar 12, 2021

dmiller-nmap commented Mar 13, 2021

NPCAP v0.9990 blocks vmware network stack after wakeup #106

NPCAP v0.9990 blocks vmware network stack after wakeup #106

Comments

zdm commented Apr 19, 2020

dmiller-nmap commented Apr 21, 2020

zdm commented Apr 21, 2020

zdm commented May 5, 2020 • edited

dmiller-nmap commented May 5, 2020

zdm commented May 5, 2020 via email

zdm commented Jun 4, 2020

zdm commented Aug 26, 2020

dmiller-nmap commented Aug 26, 2020

zdm commented Aug 27, 2020

vanc commented Jan 11, 2021

kong62 commented Jan 27, 2021

vanc commented Mar 11, 2021

zdm commented Mar 12, 2021

dmiller-nmap commented Mar 13, 2021

zdm commented May 5, 2020 •

edited