network-programmingwindows-10wiresharknpcap

NPCap and Windows 10

I am trying to capture traffic to 127.0.0.1 on a Windows 10 computer with Wireshark. I have installed NPCap but it does not appear to be capturing that tr5affic.

Looking at the interface options in Wireshark for the loopback adapter I see it has IPV4 address of 0.0.0.0. Is this correct and if so, how do I capture the localhost traffic.

Thanks, Sid

Solution

  • It seems the way to capture localhost traffic for use with Wireshark is to use "RawCap" and then examine the captured data in WireShark.

    RawCap.exe may be downloaded from here -> http://www.netresec.com/?page=RawCap

    Sid