Ethereal-users: Re: [Ethereal-users] Capturing localhost/localhost traffic on Windows 2000

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 2 Jan 2003 11:20:34 -0800
On Sun, Dec 22, 2002 at 07:43:17PM +0100, Martin Regner wrote:
> Martin Cooper wrote:
> >I know Microsoft's Network Monitor
> >can do this, so I'm assuming I'm just missing some setting for Ethereal.
> 
> Are you sure that it is working with Network Monitor (and if so, are you
> using the loopback adapter)? I have used Microsoft Network Monitor a lot
> but never seen loopback traffic.

I haven't, either.

I just used NetMon 2.0 on my W2K desktop, and pinged both the machine
itself and my ISP's Web server using "ping" from a console window - the
only ICMP packets I saw were those to and from the Web server; no
packets to or from my machine to itself were seen.

This is probably because the capture was done on an Ethernet interface,
and packets from my machine to itself wouldn't be sent on that
interface.  The only local interfaces NetMon offered were Ethernet
interfaces, and neither of them saw any local traffic.