Re: [Wireshark-users] tshark loopback

2008-03-20 Thread Stephen Fisher 
On Thu, Mar 20, 2008 at 07:17:32AM -0500, Tennis Smith wrote:

 I run a series of tests via a loopback interface on Fedora 7.  Is 
 there any way to start tshark and have it monitor activity on the 
 loopback, even if traffic is not yet being passed?

You should be able to just start it as tshark -i lo0 and it will wait 
for traffic.


Steve

___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users

Re: [Wireshark-users] tshark loopback

2008-03-20 Thread Guy Harris 
Tennis Smith wrote:

 tshark -i lo0
 Running as user root and group root. This could be dangerous.
 Capturing on lo0
 tshark: The capture session could not be initiated (SIOCGIFHWADDR: No such 
 device).

...

 ifconfig 

...

 loLink encap:Local Loopback  

I *thought* I'd remembered that it's just called lo, not lo0, on Linux.

Try tshark -i lo instead.
___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users

Re: [Wireshark-users] tshark loopback

2008-03-20 Thread Tennis Smith 
That did it. :)  Thanks.
-T

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris
Sent: Thursday, March 20, 2008 12:02 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] tshark  loopback

Tennis Smith wrote:

 tshark -i lo0
 Running as user root and group root. This could be dangerous.
 Capturing on lo0
 tshark: The capture session could not be initiated (SIOCGIFHWADDR: No such 
 device).

...

 ifconfig 

...

 loLink encap:Local Loopback  

I *thought* I'd remembered that it's just called lo, not lo0, on Linux.

Try tshark -i lo instead.
___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users
___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users

Re: [Wireshark-users] tshark loopback

2008-03-20 Thread DFE (Donald Ernst) 
I'm running on Windows XP, will this still work? 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris
Sent: Thursday, March 20, 2008 2:02 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] tshark  loopback

Tennis Smith wrote:

 tshark -i lo0
 Running as user root and group root. This could be dangerous.
 Capturing on lo0
 tshark: The capture session could not be initiated (SIOCGIFHWADDR: No
such device).

...

 ifconfig

...

 loLink encap:Local Loopback  

I *thought* I'd remembered that it's just called lo, not lo0, on
Linux.

Try tshark -i lo instead.
___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users
___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users

Re: [Wireshark-users] tshark loopback

2008-03-20 Thread Guy Harris 

On Mar 20, 2008, at 12:04 PM, DFE (Donald Ernst) wrote:

 I'm running on Windows XP, will this still work?

No:

http://wiki.wireshark.org/CaptureSetup/Loopback
___
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users