Steighton Haley wrote:
<It has been my experience that you will not be able to accomplish this.
<Essentially, any traffic bound for the local/loopback interface is
<routed inside the IP stack, so that it is never seen by NDIS.  Since
<WinPcap is an NDIS driver, the packets are never seen.

<In my experience it is impossible to sniff packets destined for a local
<or loopback interface, using any packet capture program, from network
<monitor from M$ to an application that uses WinPcap (such as Ethereal).


The only program I have tested so far that seems to be able to capture loopback 
packets on Windows is CommView (if you
install the
loopback-adapter that is included).
http://www.ethereal.com/lists/ethereal-users/200405/msg00133.html

I haven't tested it so much, just for an hour or so. So I'm not aware about any 
limitations or similar.
I uninstalled CommView demo-version the same day since I had some network problems a 
while after I installed it and I
wasn't sure
if this problem was due to the CommView. I don't think that the problem was due to 
CommView/loopback adapter - but I
haven't tried it more since then.

There might be some other programs.
However some of them might have some limitations e.g. due to that they are implemented 
as a Winsock LSP.
http://www.ethereal.com/lists/ethereal-users/200405/msg00154.html







==================================================================
 This is the WinPcap users list. It is archived at
 http://www.mail-archive.com/[EMAIL PROTECTED]/

 To unsubscribe use 
 mailto: [EMAIL PROTECTED]
==================================================================

Reply via email to