Why am I receiving a PFW30000 or PFW20002 error in the Alert Logic console?

You may encounter errors in the Alert Logic® console after agent installation if WinPCAP is not installed or is installed but being utilized by another process, preventing control of the Alert Logic agent. The following errors may indicate this issue:

• PFW30000 PCAP initialization failed
• PFW20002 No interface(s) available for listening

To resolve these errors, you need to install WinPCAP or disable the program that is utilizing the WinPCAP library. Wireshark is a common program to take control of WinPCAP.

If you are unsure what program is utilizing WinPCAP, you can find out by using the Microsoft Sysinternals tool call Process Explorer, which can return all processes utilizing the WinPCAP library. To do this, launch procexp.exe, press CTRL+F, and then search for “packet.dll”.

Other possible solutions include:

• Uninstall and reinstall the Alert Logic agent as we include WinPCAP with our agent installer. Note: There is no requirement to remove .pem files, as we do not need to re-provision the agent to resolve this issue.
• Install WinPCAP independently, which can be found here: https://www.winpcap.org/install/default.htm

Note: For Windows 7, Windows Server 2008 R2, and later the Npcap driver should be used in place of WinPcap.