# Agents and Wireshark / WinPCap

> What to expect when you run WinPCap-based tools such as Wireshark alongside the agent on 64-bit computers.

Source: https://docs.capaone.com/performanceguard/installation/install-performanceguard-agents/agents-and-wireshark-winpcap/  
Product: PerformanceGuard — a separate CapaSystems product; do not apply this page to any other.

<font style="color: #404040;">WinPCap is a packet capture library that's often used when you capture live network data. Several packet analysis applications, such as Wireshark, use WinPCap.</font>  
<font style="color: #404040;">If you use such applications together with the PerformanceGuard agent </font>*<font style="color: #404040;">on 64-bit computers</font>*<font style="color: #404040;">, read this information about how to install and remove WinPCap.</font>

# **Install WinPCap**

<font style="color: #404040;">If you want to run PerformanceGuard agents alongside a product that uses WinPCap (for example Wireshark), and you install WinPCap</font> **<font style="color: #404040;">after</font>**<font style="color: #404040;"> you've installed the PerformanceGuard agents, you must install WinPCap in the following way:</font>

1. Start an elevated command prompt and enter these commands:

   ```powershell
   Net stop pga
   ```

   ```powershell
   Net stop pgnpf
   ```

   Ignore any errors caused by the Net stop pgnpf command.

:::note[Important]
<details>
<summary>What's an elevated command prompt?</summary>

It is a command prompt that's able to execute commands with administrative privileges. To get an elevated command prompt, click ![](/attachments/performanceguard/b3ab37c1-8b56-4125-95c0-474cf23b1539.png) /Start, type *cmd*, right-click Command Prompt in the search results, and select Run as administrator.

</details>
:::
2. Install WinPCap, or the product that installs WinPCap, for example Wireshark.
3. When ready, enter this command in the elevated command prompt:

   ```powershell
   Net start pga
   ```

# **Remove WinPCap**

<font style="color: #404040;">If you need to remove WinPCap from a computer that also runs the PerformanceGuard agent, do the following:</font>

1. Start an elevated command prompt and enter this command:

   ```powershell
   Net stop pga
   ```
2. Remove WinPCap, or the product that has installed WinPCap, for example Wireshark.
3. When ready, enter this command in the elevated command prompt:

   ```powershell
   Net start pga
   ```
