I need help running suricata on windows using windivert

Hello,

To install suricata on my windows server 2022 I used the pre built binary that comes with windivert.

Suricata version: 7.0.6

When trying to run the test commands to see if windivert is enabled I used the following command

suricata -c suricata.yaml --windivert [filter string]

I seem to always get the message wpcap.dll was not found. Do i need to install npcap to use suricata with windivert? Not sure if there exists an example yaml config for using suricata this way on Windows.

Thank you

Screenshot from 2024-08-30 14-50-49

This means there’s no support for handling PCAP files on your system. You can download npcap from https://npcap.com/