Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am using Wireshark on Windows Vista and I would like to capture http traffic to localhost (127.0.0.1), for debugging purposes, but I have some questions.

  • How can I do this?
  • What capture interface should I use?
    • If I use my NIC as capture interface, only packets to and from the internet are captured.
  • Are there any settings in Wireshark to capture packets going to and from localhost?
share|improve this question

2 Answers 2

up vote 7 down vote accepted

The short answer is, on Windows you can't. The Wireshark Wiki describes a couple of workarounds, such as installing a virtual network card using the Microsoft Loopback Adapter, however the results are less than optimal. Their suggestion of setting up a new route will give you all of your data twice, and could put unnecessary load on your network if left enabled, but you should get the data.

share|improve this answer

If you capture on the local loopback interface (called lo0 on my machine), that will show you the traffic between localhost and itself. The loopback is where localhost traffic goes when it doesn't have to go through the NIC interface.

share|improve this answer
    
Thanks, but I forgot to write that I'm using it on Windows. I have updated my question now. –  Jonas Jun 29 '10 at 22:27
    
Oh okay. I've never actually tried Wireshark on Windows, only Linux and Mac OS X. –  Steve Nay Jun 29 '10 at 22:36

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.