First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

wireshark is not seeing 127.0.0.1 though i have installed npcap and have all interfaces checked

wireshark is not seeing 127.0.0.1 though i have installed npcap and have all interfaces checked

OS is windows 7

as you see I ping(icmp) google and then ping 127.0.0.1 , my display filter is set to pick up ping/icmp. It picks up pinging google, it doesn't pick up pinging 127.0.0.1

image description

image description

added

Wireshark Version 3.4.2

Npcap listed in programs and features, installed 25th December 2020. If I double click it it says it's NP Cap 1.00 I don't know how to get a version from npcap beyond that

I can't see an npcap.dll listed under help..about..plugins, not sure if anything like that should be.

barlbarl's avatar
3
barlbarl
asked 2022-06-18 04:20:26 +0000, updated 2022-06-18 05:33:30 +0000
edit flag offensive 0 remove flag close merge delete

Comments

npcap can be downloaded and installed directly from their site.

grahamb's avatar grahamb (2022-06-18 05:33:39 +0000) edit
more
  • delete

just added to my question, thanks

barlbarl's avatar barlbarl (2022-06-18 05:33:42 +0000) edit
more
  • delete

since updating npcap from their site, so now npcap 1.6, wireshark is now not capturing anything

barlbarl's avatar barlbarl (2022-06-18 06:40:44 +0000) edit
more
  • delete

That would be an issue for the npcap folks then. You could try uninstalling npcap, rebooting and then installing it again.

grahamb's avatar grahamb (2022-06-18 07:13:02 +0000) edit
more
  • delete

ok so I see the reason it wasn't capturing anything was because I had selected LAN. Because a) a WLAN e.g. my "Wireless Connection 6", is a LAN. and b)all interfaces listed in the capture options , made me think it'd show traffic/packets from all interfaces especially with all the tickboxes in the "manage interfaces" screen, next to all of them. Now I see I had to choose one interface specifically, in the capture options screen. And I see that if I choose loopback, that works and then I just see loopback.

barlbarl's avatar barlbarl (2022-06-18 15:35:29 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

0

The loopback traffic should show up on the "Adaptor for loopback traffic capture interface". That works for me (Win 10, Wireshark 3.7.1, npcap 1.60).

What version of Wireshark and npcap are you using? See the Wireshark Help -> About Wireshark -> Wireshark tab for the info

Presumably you're aware that Win 7 is obsolete and no longer supported? The latest Wireshark version to officially support it is 3.2, I'm not sure about any npcap limitations.

grahamb's avatar
23.8k
grahamb
answered 2022-06-18 05:21:29 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Thanks yeah I think main thing was I was confused by the GUI as I hadn't used it for a while. All interfaces being checked in managed interfaces isn't relevant, as it only shows packets from one interface at a time. So if I choose my wireless network adaptor, which is "Wireless Network Connection 6" that won't include 127.0.0.1. And also I see each item in the list is an individual interface so LAN won't isn't any LAN, it's the name of a wired adaptor and doesn't include the WLAN.

barlbarl's avatar barlbarl (2022-06-19 01:58:41 +0000) edit
more
  • delete

All interfaces being checked in managed interfaces isn't relevant, as it only shows packets from one interface at a time.

I don't think that's correct, Wireshark should capture on all interfaces selected for caprure and does so for me.

If an answer has solved your issue, for the benefit of others that may have similar query please accept the answer by clicking the checkmark icon to the left of it.

grahamb's avatar grahamb (2022-06-19 05:12:38 +0000) edit
more
  • delete

oh I see I can do ctrl + click multiple ones. Yes now I get traffic from multiple interfaces. e.g. my wireless lan interface and the loopback interface. Thanks

barlbarl's avatar barlbarl (2022-06-19 05:27:31 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer