Windows Server 2008 R2 currently requires the beta version of winpcap, and you need to run the installer in compatibility mode to install it.
- Download wireshark
- Down the winpcap 4.1 beta
- Right click the winpcap installer, properties, compatibility mode, set to server 2008
- Install wincap
- Install wireshark
- Open an administrative command prompt (right click, run as administrator)
- “sc start npf”
- Run wireshark