Use Windows 7 with USB Ethernet adapter under VMWare 15.5. When Wireshark runs on the host machine with VMWare disabled, its behavior depends on the connection: it runs continuously on USB 3 and on USB2 it captures ~1250 packets and the message: The network adapter on which capture was being done is no longer running. When there is no traffic, or when non-promiscuos mode is selected, the error message does not appear.

The error occurs only in promiscuous mode.

When the message appears, the adapter is reset in normal (non-promiscuous mode). If I retry the capture, it captures another 795 packets and displays the same message. After that, the adapter entry is restored. The capture displays 789packets correctly, and then displays a window with following text: Error While Capturing packets: the device has been removed (1617). The adapter receives the multicast video stream from 239.10.10.1 at 45Mbit/s. When it is started, I see that the adapter is removed and reconnected.

The adapter operates normally until wireshark capture is started. Vmware does not have USB3 host so I have to connect it with USB2 cable. I installed Microchip's LAN7801 USB network adapter on Windows 7 64-bit OS running as guest OS under VMware Workstation 15.5.

Wireshark promiscuous mode windows