On Windows, runZero uses a licensed third-party library called npcap for access to raw network traffic. Other software installed on the Explorer’s host machine may also use npcap, and sometimes will have installed obsolete versions of the software. This can cause reliability problems.
runZero will alert you to obsolete versions of npcap by displaying a warning icon in the list of Explorers.
However, runZero cannot yet reliably upgrade npcap for you. runZero can’t automatically upgrade npcap/winpcap, as it tends to be shared between applications, and forcing an upgrade from the runZero side can break other services (EDRs, Wireshark, etc).
To upgrade npcap:
- Stop any running runZero services. This can be done using the Windows Services app. You’ll need to look for “runZero Network Discovery Explorer”.
- Stop any other running software which uses npcap.
- Uninstall Winpcap and any npcap installations via the Windows Control Panel.
- Reboot the computer.
runZero will restart automatically, and install the latest npcap.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article