First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Can I set up Wireshark to capture on a virtual IP configured on the local loopback subnet (i.e. 127.0.0.2)?

I have configured a set of virtual IPs on the local loopback subnet (i.e. 127.0.0.2->6) of my CentOS 6.10 VM. This is necessary to support testing in an environment where I can't simply add conventional VIPs to the NIC. I am trying to figure out how to configure Wireshark to capture traffic on one of these loopback VIPs, lo:1 (aka 127.0.0.2). I see LO in the interface list, but none of the others.

lo:1 Link encap:Local Loopback inet addr:127.0.0.2 Mask:255.224.0.0 UP LOOPBACK RUNNING MTU:65536 Metric:1

Any ideas? There's no trace of my traffic on lo (127.0.0.1), as expected.

Kind regards, -Kirk

Yonaguska's avatar
1
Yonaguska
asked 2018-11-20 19:11:12 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

2 Answers

0

npcap is supposed to support that. just wrote an article on it https://www.networkcomputing.com/netw...

thetechfirm's avatar
96
thetechfirm
answered 2018-11-20 22:55:46 +0000
edit flag offensive 0 remove flag delete link
more

Comments

I appreciate your quick reply, but I don't think I can use npcap. It appears to be a Windows driver, and I'm running on CentOS. But this suggests I might need to look at Libpcap's capabilities. Again, thanks for your help.

Yonaguska's avatar Yonaguska (2018-11-20 23:08:07 +0000) edit
more
  • delete
add a comment see more comments
0

The 'others' are aliases of the loopback interface lo, where alias means 'other name for same thing'. In this case the same thing is the interface lo. So what you do is capture on lo and see the traffic for the aliases (127.0.0.2 ...) as well as the main address (127.0.0.1). It will all be on the same device, and that is what you capture on, not on an address.

Jaap's avatar
13.7k
Jaap
answered 2018-11-21 07:55:56 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer