<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style id="owaParaStyle">P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
</style>
</head>
<body bgcolor="#ffffff" ocsi="0" fPStyle="1">
<div style="FONT-FAMILY: Tahoma; DIRECTION: ltr; COLOR: #000000; FONT-SIZE: 10pt">
<p>Congrats...</p>
<p>FYI...the Windows search function doesn't find program files and such unless you tell it to.</p>
<p> </p>
<p><a href="http://windows.microsoft.com/en-US/windows-vista/Improve-Windows-searches-using-the-index-frequently-asked-questions" target="_blank">http://windows.microsoft.com/en-US/windows-vista/Improve-Windows-searches-using-the-index-frequently-asked-questions</a></p>
<p> </p>
<div>
<p> </p>
<div style="FONT-FAMILY: Tahoma; FONT-SIZE: 13px">
<p>Michael D. Black</p>
<p>Senior Scientist</p>
<p>Advanced Analytics Directorate</p>
<p>Advanced GEOINT Solutions Operating Unit</p>
<p>Northrop Grumman Information Systems</p>
</div>
</div>
<hr tabindex="-1">
<div style="DIRECTION: ltr" id="divRpF151544"><font color="#000000" size="2" face="Tahoma"><b>From:</b> winpcap-users-bounces@winpcap.org [winpcap-users-bounces@winpcap.org] on behalf of Fred Marshall [fmarshall@acm.org]<br>
<b>Sent:</b> Saturday, January 28, 2012 8:12 PM<br>
<b>To:</b> winpcap-users@winpcap.org<br>
<b>Subject:</b> EXT :Re: [Winpcap-users] Windows 7 Pro x64 RE Install Fails<br>
</font><br>
</div>
<div></div>
<div><br>
<br>
Problem solved.<br>
Recall that this is a system that had no remnants of WinPcap on it as nearly as I was humanly capable of finding and removing things. Same process after each install attempt.<br>
WinPcap was complaining at install that it was already installed .. but it "wasn't".<br>
Program uninstalls were tried but there was nothing to uninstall. Windows AND Revo.<br>
The registry was cleared out.<br>
The Program Files were cleared out.<br>
Envisioning having to reinstall Windows, I took a flyer and ran ComboFix on the system.<br>
<br>
It quarantined:<br>
Packet.dll<br>
winpcap.dll<br>
these files were both in <br>
<br>
c:\windows\SysWOW64 .... imagine that!<br>
<br>
That's not where they usually show up with a normal install. And, of course, why they didn't show up in a Search remains a mystery as well.<br>
<br>
Anyway, after this WinPcap installed just fine.<br>
A lesson learned.<br>
Thanks all for your forbearance!<br>
<br>
Fred<br>
<br>
<br>
On 1/12/2012 9:27 PM, Fred Marshall wrote:
<blockquote type="cite"><font size="-1"><font face="Courier New">Mark,<br>
<br>
Well, I haven't really changed the apps since I had WinPCAP working before on this system. I think the nfp issue deserves some focus.<br>
<br>
Regards,<br>
<br>
Fred<br>
</font></font><br>
On 1/9/2012 1:11 PM, Mark Pizzolato - WinPCap-Users wrote:
<blockquote type="cite"><style>@font-face {
font-family: Wingdings;
}
@font-face {
font-family: Wingdings;
}
@font-face {
font-family: Calibri;
}
@font-face {
font-family: Tahoma;
}
@font-face {
font-family: Consolas;
}
@page WordSection1 {margin: 1.0in 1.0in
1.0in 1.0in; }
P.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif"; COLOR: black; FONT-SIZE: 12pt
}
LI.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif"; COLOR: black; FONT-SIZE: 12pt
}
DIV.MsoNormal {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman","serif"; COLOR: black; FONT-SIZE: 12pt
}
A:link {
COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline
}
PRE {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Courier
New","serif"; COLOR: black; FONT-SIZE: 10pt
}
P.MsoAcetate {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Tahoma","sans-serif"; COLOR: black; FONT-SIZE: 8pt
}
LI.MsoAcetate {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Tahoma","sans-serif"; COLOR: black; FONT-SIZE: 8pt
}
DIV.MsoAcetate {
MARGIN: 0in 0in 0pt; FONT-FAMILY: "Tahoma","sans-serif"; COLOR: black; FONT-SIZE: 8pt
}
P.MsoListParagraph {
MARGIN: 0in 0in 0pt 0.5in; FONT-FAMILY: "Times New Roman","serif"; COLOR: black; FONT-SIZE: 12pt
}
LI.MsoListParagraph {
MARGIN: 0in 0in 0pt 0.5in; FONT-FAMILY: "Times New Roman","serif"; COLOR: black; FONT-SIZE: 12pt
}
DIV.MsoListParagraph {
MARGIN: 0in 0in 0pt 0.5in; FONT-FAMILY: "Times New Roman","serif"; COLOR: black; FONT-SIZE: 12pt
}
SPAN.HTMLPreformattedChar {
FONT-FAMILY: Consolas; COLOR: black
}
SPAN.EmailStyle20 {
FONT-FAMILY: "Calibri","sans-serif"; COLOR: #1f497d
}
SPAN.BalloonTextChar {
FONT-FAMILY: "Tahoma","sans-serif"; COLOR: black
}
SPAN.EmailStyle23 {
FONT-FAMILY: "Calibri","sans-serif"; COLOR: #1f497d
}
.MsoChpDefault {
FONT-SIZE: 10pt
}
DIV.WordSection1 {
}
OL {
MARGIN-BOTTOM: 0in
}
UL {
MARGIN-BOTTOM: 0in
}
</style>
<div class="WordSection1">
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Hi Fred,</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Hmmm… You say “huge task to configure it with app’s, etc.” suggests to me that one of those steps is involved in the issues you are having with WinPcap.</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Feel free to keep banging your head against this issue without making much real progress or you can try to start from a scratch system with a working WinPcap
environment and add each of the “apps” one at a time to determine the one which negatively interacts….</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Good Luck.</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<p style="TEXT-INDENT: -0.25in" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"><span>-<span style="FONT: 7pt 'Times New Roman'">
</span></span></span><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Mark</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<div style="BORDER-BOTTOM: medium none; BORDER-LEFT: blue 1.5pt solid; PADDING-BOTTOM: 0in; PADDING-LEFT: 4pt; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">
<div>
<div style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<p class="MsoNormal"><b><span style="FONT-FAMILY: 'Tahoma','sans-serif'; COLOR: windowtext; FONT-SIZE: 10pt">From:</span></b><span style="FONT-FAMILY: 'Tahoma','sans-serif'; COLOR: windowtext; FONT-SIZE: 10pt">
<a class="moz-txt-link-abbreviated" href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">
winpcap-users-bounces@winpcap.org</a> [<a class="moz-txt-link-freetext" href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">mailto:winpcap-users-bounces@winpcap.org</a>]
<b>On Behalf Of </b>Fred Marshall<br>
<b>Sent:</b> Monday, January 09, 2012 1:05 PM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:winpcap-users@winpcap.org" target="_blank">
winpcap-users@winpcap.org</a><br>
<b>Subject:</b> Re: [Winpcap-users] Windows 7 Pro x64 RE Install Fails</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span>Mark,<br>
<br>
Well, this is a fairly new system and it's set up as the "tool workstation" for network administrator tasks.
<br>
It's a huge task to configure it with app's, etc.<br>
Yet, nothing very strange about it.<br>
I won't say that the system hasn't had its quirks but I have no evidence to suggest one thing or another.</span><br>
<br>
On 1/8/2012 5:00 PM, Mark Pizzolato - WinPCap-Users wrote: </p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">I’m not sure what you are trying to determine.</span></p>
<p style="TEXT-INDENT: -0.25in; MARGIN-LEFT: 24.75pt" class="MsoListParagraph"><span style="FONT-FAMILY: Wingdings"><span>Ø<span style="FONT: 7pt 'Times New Roman'">
</span></span></span><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Sc qc npf</span></p>
<p style="MARGIN-LEFT: 24.75pt" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Returns the configuration for the npf service</span></p>
<p style="TEXT-INDENT: -0.25in; MARGIN-LEFT: 24.75pt" class="MsoListParagraph"><span style="FONT-FAMILY: Wingdings"><span>Ø<span style="FONT: 7pt 'Times New Roman'">
</span></span></span><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Net start npf</span></p>
<p style="MARGIN-LEFT: 24.75pt" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Starts the npf service.</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Clearly these are NOT the same thing.</span></p>
<p style="TEXT-INDENT: -0.25in; MARGIN-LEFT: 24.75pt" class="MsoListParagraph"><span style="FONT-FAMILY: Wingdings"><span>Ø<span style="FONT: 7pt 'Times New Roman'">
</span></span></span><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Sc start npf</span></p>
<p style="MARGIN-LEFT: 24.75pt" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">would be the same as “net start npf”</span></p>
<p style="MARGIN-LEFT: 24.75pt" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<p style="MARGIN-LEFT: 0in" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Something is clearly tangled up on the system which doesn’t work. Winpcap works for me (and MANY other folks) on MANY Win7
x64 systems without any problem.</span></p>
<p style="MARGIN-LEFT: 0in" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<p style="MARGIN-LEFT: 0in" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Even though you’ve had control of the affected system since it shipped, something that happened to the system while you’ve
had control of it has created this tangle.</span></p>
<p style="MARGIN-LEFT: 0in" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<p style="MARGIN-LEFT: 0in" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">I hate to suggest restoring the system to the condition it shipped in would likely make things work, but that may be what
you need to do….</span></p>
<p style="MARGIN-LEFT: 0in" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<p style="MARGIN-LEFT: 0in" class="MsoListParagraph"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt">Good Luck.</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #1f497d; FONT-SIZE: 11pt"></span> </p>
<div style="BORDER-BOTTOM: medium none; BORDER-LEFT: blue 1.5pt solid; PADDING-BOTTOM: 0in; PADDING-LEFT: 4pt; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">
<div>
<div style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<p class="MsoNormal"><b><span style="FONT-FAMILY: 'Tahoma','sans-serif'; COLOR: windowtext; FONT-SIZE: 10pt">From:</span></b><span style="FONT-FAMILY: 'Tahoma','sans-serif'; COLOR: windowtext; FONT-SIZE: 10pt">
<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a> [<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">mailto:winpcap-users-bounces@winpcap.org</a>]
<b>On Behalf Of </b>Fred Marshall<br>
<b>Sent:</b> Sunday, January 08, 2012 4:31 PM<br>
<b>To:</b> <a href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a><br>
<b>Subject:</b> Re: [Winpcap-users] Windows 7 Pro x64 RE Install Fails</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span>I've had control of this system since it was shipped .. basically.
<br>
I have another Window 7 64 system that works fine - uses the same antivirus too.<br>
<br>
Today I figured out that the npf.sys driver must be a problem.<br>
<br>
On the troubled system, I ran<br>
sc qc npf<br>
and get a good report.<br>
So it seems the file is "there".....<br>
<br>
If I run:<br>
sc config npf start= auto<br>
there is no complaint; yet, it doesn't seem to do anything in a reboot.<br>
<br>
If I run <br>
net start npf<br>
I get Syhstem error 2 has occurred<br>
The system cannot find the file specified. !!!!!!<br>
<br>
So, it appears there is a difference between<br>
sc qc npf<br>
and<br>
net start npf<br>
<br>
I've also looked at the ... well I can't find the full steps but it's like in the not plugnplay, hidden, etc.<br>
and it's not showing there.......<br>
<br>
Everything has been run as Administrator, etc.<br>
<br>
</span>Fred<br>
On 1/5/2012 4:45 PM, "Fish" (David B. Trout) wrote: </p>
<pre>Fred Marshall wrote:</pre>
<pre> </pre>
<blockquote style="MARGIN-TOP: 5pt; MARGIN-BOTTOM: 5pt">
<pre>This problem persists and I've not found a solution.</pre>
<pre>Is there any way to install WinPcap on Windows 7 x64???</pre>
</blockquote>
<pre> </pre>
<pre>I've installed it many times on my Windows 7 x64 system without any problem</pre>
<pre>whatsoever. So have many others. There is obviously something unique about</pre>
<pre>your particular system that you need to figure out.</pre>
<pre> </pre>
<pre>Did you perchance change the permissions of your system drive (the Program</pre>
<pre>Files directory)? Or change the permissions of your Registry? Did you maybe</pre>
<pre>disable some critical Windows service or something? Have you tried</pre>
<pre>COMPLETELY uninstalling your anti-virus? (just as a test)</pre>
<pre> </pre>
<pre>You (or someone else) obviously changed something on your system to prevent</pre>
<pre>the installation of WinPCap from succeeding, and you need to figure out what</pre>
<pre>that something was.</pre>
<pre> </pre>
</div>
<p class="MsoNormal"><br>
<br>
<br>
</p>
<pre>_______________________________________________</pre>
<pre>Winpcap-users mailing list</pre>
<pre><a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a></pre>
<pre><a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a></pre>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset> <br>
<pre>_______________________________________________
Winpcap-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a>
<a class="moz-txt-link-freetext" href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a>
</pre>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset> <br>
<pre>_______________________________________________
Winpcap-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a>
<a class="moz-txt-link-freetext" href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a>
</pre>
</blockquote>
</div>
</div>
</body>
</html>