Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Every time I try to filter to just show a specific IP Address, I get an error indicating that it is "not an interface or a field." I have no idea what that means. Furthermore, I don’t really see any localhost traffic in the logs anyway.

How can I show TCP localhost traffic?

share|improve this question

migrated from stackoverflow.com Nov 21 '12 at 10:14

This question came from our site for professional and enthusiast programmers.

    
how exactly are you trying to do this? –  Oleksandr Kravchuk Nov 21 '12 at 1:44
    
@glutz, linux or windows? –  Mike Pennington Nov 21 '12 at 2:39
    
windows7. looks like rawcap.exe works. –  glutz Nov 21 '12 at 4:33

2 Answers 2

up vote 3 down vote accepted

If you are trying to this on a Windows computer, unfortunately it is not possible out of the box. You will need to install some additional software that will capture data on the loopback interface. Follow the guide at http://wiki.wireshark.org/CaptureSetup/Loopback.

On a Linux computer, you will need to capture from the loopback interface which is lo0 most of the time.

share|improve this answer

Although you found the answer before I could respond, you can also use Socket Sniffer, which looks at Winsock calls and monitors network sockets; the download link is at the bottom of the page.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.