How can I capture traffic to localhost using Wireshark?
I am using Wireshark on Windows Vista and I would like to capture http traffic to localhost (127.0.0.1), for debugging purposes, but I have some questions.
- How can I do this?
- What capture interface should I use?
- If I use my NIC as capture interface, only packets to and from the internet are captured.
- Are there any settings in Wireshark to capture packets going to and from localhost?
windows-vista localhost wireshark capture
edited Apr 25 '14 at 3:56
HopelessN00b
1,82931829
asked Jun 29 '10 at 22:20
JonasJonas
9,7073994120
add a comment |
I am using Wireshark on Windows Vista and I would like to capture http traffic to localhost (127.0.0.1), for debugging purposes, but I have some questions.
- How can I do this?
- What capture interface should I use?
- If I use my NIC as capture interface, only packets to and from the internet are captured.
- Are there any settings in Wireshark to capture packets going to and from localhost?
windows-vista localhost wireshark capture
edited Apr 25 '14 at 3:56
HopelessN00b
1,82931829
asked Jun 29 '10 at 22:20
JonasJonas
9,7073994120
add a comment |
I am using Wireshark on Windows Vista and I would like to capture http traffic to localhost (127.0.0.1), for debugging purposes, but I have some questions.
- How can I do this?
- What capture interface should I use?
- If I use my NIC as capture interface, only packets to and from the internet are captured.
- Are there any settings in Wireshark to capture packets going to and from localhost?
windows-vista localhost wireshark capture
edited Apr 25 '14 at 3:56
HopelessN00b
1,82931829
asked Jun 29 '10 at 22:20
JonasJonas
9,7073994120
I am using Wireshark on Windows Vista and I would like to capture http traffic to localhost (127.0.0.1), for debugging purposes, but I have some questions.
- How can I do this?
- What capture interface should I use?
- If I use my NIC as capture interface, only packets to and from the internet are captured.
- Are there any settings in Wireshark to capture packets going to and from localhost?
windows-vista localhost wireshark capture
windows-vista localhost wireshark capture
edited Apr 25 '14 at 3:56
HopelessN00b
1,82931829
asked Jun 29 '10 at 22:20
JonasJonas
9,7073994120
edited Apr 25 '14 at 3:56
HopelessN00b
1,82931829
asked Jun 29 '10 at 22:20
JonasJonas
9,7073994120
edited Apr 25 '14 at 3:56
HopelessN00b
1,82931829
edited Apr 25 '14 at 3:56
HopelessN00b
1,82931829
edited Apr 25 '14 at 3:56
HopelessN00b
1,82931829
1,82931829
asked Jun 29 '10 at 22:20
JonasJonas
9,7073994120
asked Jun 29 '10 at 22:20
JonasJonas
9,7073994120
asked Jun 29 '10 at 22:20
JonasJonas
9,7073994120
9,7073994120
add a comment |
add a comment |
3 Answers
3
active
oldest
votes
The short answer is, on Windows you can't. The Wireshark Wiki describes a couple of workarounds, such as installing a virtual network card using the Microsoft Loopback Adapter, however the results are less than optimal. Their suggestion of setting up a new route will give you all of your data twice, and could put unnecessary load on your network if left enabled, but you should get the data.
answered Jun 29 '10 at 22:31
heavydheavyd
50.6k12123156
add a comment |
If you capture on the local loopback interface (called lo0 on my machine), that will show you the traffic between localhost and itself. The loopback is where localhost traffic goes when it doesn't have to go through the NIC interface.
answered Jun 29 '10 at 22:24
Steve NaySteve Nay
21028
Thanks, but I forgot to write that I'm using it on Windows. I have updated my question now.
– Jonas
Jun 29 '10 at 22:27
Oh okay. I've never actually tried Wireshark on Windows, only Linux and Mac OS X.
– Steve Nay
Jun 29 '10 at 22:36
add a comment |
For anyone reading this in 2019 or later, Wireshark 3.0 ships with Npcap, which allows loopback capture.
answered Jan 16 at 0:27
Gerald CombsGerald Combs
26114
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f158352%2fhow-can-i-capture-traffic-to-localhost-using-wireshark%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
3 Answers
3
active
oldest
votes
3 Answers
3
active
oldest
votes
active
oldest
votes
active
oldest
votes
The short answer is, on Windows you can't. The Wireshark Wiki describes a couple of workarounds, such as installing a virtual network card using the Microsoft Loopback Adapter, however the results are less than optimal. Their suggestion of setting up a new route will give you all of your data twice, and could put unnecessary load on your network if left enabled, but you should get the data.
answered Jun 29 '10 at 22:31
heavydheavyd
50.6k12123156
add a comment |
The short answer is, on Windows you can't. The Wireshark Wiki describes a couple of workarounds, such as installing a virtual network card using the Microsoft Loopback Adapter, however the results are less than optimal. Their suggestion of setting up a new route will give you all of your data twice, and could put unnecessary load on your network if left enabled, but you should get the data.
answered Jun 29 '10 at 22:31
heavydheavyd
50.6k12123156
add a comment |
The short answer is, on Windows you can't. The Wireshark Wiki describes a couple of workarounds, such as installing a virtual network card using the Microsoft Loopback Adapter, however the results are less than optimal. Their suggestion of setting up a new route will give you all of your data twice, and could put unnecessary load on your network if left enabled, but you should get the data.
answered Jun 29 '10 at 22:31
heavydheavyd
50.6k12123156
The short answer is, on Windows you can't. The Wireshark Wiki describes a couple of workarounds, such as installing a virtual network card using the Microsoft Loopback Adapter, however the results are less than optimal. Their suggestion of setting up a new route will give you all of your data twice, and could put unnecessary load on your network if left enabled, but you should get the data.
answered Jun 29 '10 at 22:31
heavydheavyd
50.6k12123156
answered Jun 29 '10 at 22:31
heavydheavyd
50.6k12123156
answered Jun 29 '10 at 22:31
heavydheavyd
50.6k12123156
answered Jun 29 '10 at 22:31
heavydheavyd
50.6k12123156
50.6k12123156
add a comment |
add a comment |
If you capture on the local loopback interface (called lo0 on my machine), that will show you the traffic between localhost and itself. The loopback is where localhost traffic goes when it doesn't have to go through the NIC interface.
answered Jun 29 '10 at 22:24
Steve NaySteve Nay
21028
Thanks, but I forgot to write that I'm using it on Windows. I have updated my question now.
– Jonas
Jun 29 '10 at 22:27
Oh okay. I've never actually tried Wireshark on Windows, only Linux and Mac OS X.
– Steve Nay
Jun 29 '10 at 22:36
add a comment |
If you capture on the local loopback interface (called lo0 on my machine), that will show you the traffic between localhost and itself. The loopback is where localhost traffic goes when it doesn't have to go through the NIC interface.
answered Jun 29 '10 at 22:24
Steve NaySteve Nay
21028
Thanks, but I forgot to write that I'm using it on Windows. I have updated my question now.
– Jonas
Jun 29 '10 at 22:27
Oh okay. I've never actually tried Wireshark on Windows, only Linux and Mac OS X.
– Steve Nay
Jun 29 '10 at 22:36
add a comment |
If you capture on the local loopback interface (called lo0 on my machine), that will show you the traffic between localhost and itself. The loopback is where localhost traffic goes when it doesn't have to go through the NIC interface.
answered Jun 29 '10 at 22:24
Steve NaySteve Nay
21028
If you capture on the local loopback interface (called lo0 on my machine), that will show you the traffic between localhost and itself. The loopback is where localhost traffic goes when it doesn't have to go through the NIC interface.
answered Jun 29 '10 at 22:24
Steve NaySteve Nay
21028
answered Jun 29 '10 at 22:24
Steve NaySteve Nay
21028
answered Jun 29 '10 at 22:24
Steve NaySteve Nay
21028
answered Jun 29 '10 at 22:24
Steve NaySteve Nay
21028
21028
Thanks, but I forgot to write that I'm using it on Windows. I have updated my question now.
– Jonas
Jun 29 '10 at 22:27
Oh okay. I've never actually tried Wireshark on Windows, only Linux and Mac OS X.
– Steve Nay
Jun 29 '10 at 22:36
add a comment |
Thanks, but I forgot to write that I'm using it on Windows. I have updated my question now.
– Jonas
Jun 29 '10 at 22:27
Oh okay. I've never actually tried Wireshark on Windows, only Linux and Mac OS X.
– Steve Nay
Jun 29 '10 at 22:36
Thanks, but I forgot to write that I'm using it on Windows. I have updated my question now.
– Jonas
Jun 29 '10 at 22:27
Thanks, but I forgot to write that I'm using it on Windows. I have updated my question now.
– Jonas
Jun 29 '10 at 22:27
Oh okay. I've never actually tried Wireshark on Windows, only Linux and Mac OS X.
– Steve Nay
Jun 29 '10 at 22:36
Oh okay. I've never actually tried Wireshark on Windows, only Linux and Mac OS X.
– Steve Nay
Jun 29 '10 at 22:36
add a comment |
For anyone reading this in 2019 or later, Wireshark 3.0 ships with Npcap, which allows loopback capture.
answered Jan 16 at 0:27
Gerald CombsGerald Combs
26114
add a comment |
For anyone reading this in 2019 or later, Wireshark 3.0 ships with Npcap, which allows loopback capture.
answered Jan 16 at 0:27
Gerald CombsGerald Combs
26114
add a comment |
For anyone reading this in 2019 or later, Wireshark 3.0 ships with Npcap, which allows loopback capture.
answered Jan 16 at 0:27
Gerald CombsGerald Combs
26114
For anyone reading this in 2019 or later, Wireshark 3.0 ships with Npcap, which allows loopback capture.
answered Jan 16 at 0:27
Gerald CombsGerald Combs
26114
answered Jan 16 at 0:27
Gerald CombsGerald Combs
26114
answered Jan 16 at 0:27
Gerald CombsGerald Combs
26114
answered Jan 16 at 0:27
Gerald CombsGerald Combs
26114
26114
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f158352%2fhow-can-i-capture-traffic-to-localhost-using-wireshark%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
