# I need help running suricata on windows using windivert

**URL:** <https://forum.suricata.io/t/i-need-help-running-suricata-on-windows-using-windivert/4834>\
**Category:** Help\
**Tags:** windows, suricata\
**Created:** [August 30, 2024, 12:52pm UTC](https://forum.suricata.io/t/i-need-help-running-suricata-on-windows-using-windivert/4834 "2024-08-30T12:52:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![VictorVanhoorenHogen](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/victorvanhoorenhogen/32/3108_2.png) [@VictorVanhoorenHogen](https://forum.suricata.io/u/VictorVanhoorenHogen)\
**Post date:** [August 30, 2024, 12:52pm UTC](https://forum.suricata.io/t/i-need-help-running-suricata-on-windows-using-windivert/4834/1 "2024-08-30T12:52:24Z")

</div>

Hello,

To install suricata on my windows server 2022 I used the pre built binary that comes with windivert.

Suricata version: 7.0.6

When trying to run the test commands to see if windivert is enabled I used the following command

```auto
suricata -c suricata.yaml --windivert [filter string]

```

I seem to always get the message wpcap.dll was not found. Do i need to install npcap to use suricata with windivert? Not sure if there exists an example yaml config for using suricata this way on Windows.

Thank you

![Screenshot from 2024-08-30 14-50-49](https://canada1.discourse-cdn.com/flex030/uploads/suricata/original/2X/4/45e1fdcaefcdebe843259e40e60ab1071ae39ebf.png)

---

<div class="post-metadata">

**Author:** ![Jeff\_Lucovsky](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/jeff_lucovsky/32/11_2.png) [@Jeff\_Lucovsky](https://forum.suricata.io/u/Jeff_Lucovsky)\
**Post date:** [September 2, 2024, 4:29pm UTC](https://forum.suricata.io/t/i-need-help-running-suricata-on-windows-using-windivert/4834/2 "2024-09-02T16:29:35Z")

</div>

This means there’s no support for handling PCAP files on your system. You can download npcap from [https://npcap.com/](https://npcap.com/)