Ethereal-users: Re: [Ethereal-users] capturing loopback packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 6 Jan 2003 16:04:49 -0800
On Mon, Jan 06, 2003 at 06:52:48PM -0500, Jay Chalfant wrote:
> I just installed WinPcap 2.3 and ethereal 0.9.8 on my Win2k sp2 box. I
> notice that ethereal doesn't capture loopback requests in this
> configuration. Is there something I can do to make this work?

If by "loopback requests" you mean packets from the machine to itself,
then, as far as I know, the only thing you could do to make it work
would be to get the source to Windows 2000 and modify the networking
code in the kernel to somehow hand loopback packets up through NDIS, so
that WinPcap can get them.

If by "loopback requests" you mean packets going through the Microsoft
Loopback Adapter, then, if Ethereal can't capture on that device, the
only thing you could do to make it work would be to modify the OS kernel
source or the Loopback Adapter kernel source.

(I.e., this is, as far as I know, an inherent deficiency in the way the
Windows networking stack works.)