if you want to view live traffic in Wireshark, you can still do it by running RawCap from one command-line and running Wireshark from another. cmaynard describes this ingenious approach at the Wireshark forums. You can view loopback traffic live in Wireshark by having it read RawCap's output instantly. They leave your pc and once when they return). That wireshark will report packets twice in this scenario, once when The network boundary, so wireshark could then track the data (note Windows XP command line to force all local traffic out and back across Say your XP IP address is 192.168.0.2 and your gateway (router)Īddress is 192.168.0.1 you could run the following command from
Out via your network gateway (router) by setting up a (temporary) However there is a way around this, you can route the local traffic Received on the same machine they don't seem to cross the network Wireshark can't actually capture local packets on windows XP due to
I haven't actually tried this, but this answer from the web sounds promising: What you need to do is to install the Microsoft loopback adapter, and then sniff on it. On Windows platform, it is also possible to capture localhost traffic using Wireshark. There is also one bug regarding Windows XP SP 3. you have to capture all localhost traffic which can be heavy. The only disadvantage that I found is that you cannot set filters, i.e.
There is a little jewel called RawCap that can capture localhost traffic on Windows. Solution 2įor some reason, none of previous answers worked in my case, so I'll post something that did the trick. The linked page contains instructions for capturing on the loopback interface. See CaptureSetup/Loopback.Īlthough the page mentions that this is not possible on Windows using Wireshark alone, you can actually record it using a workaround as mentioned in a different answer.ĮDIT: Some 3 years later, this answer is no longer completely correct. You can use the local address of your machine instead and then you'll be able to capture stuff. If you're using Windows it's not possible - read below.
0 kommentar(er)
