 | 1 | initial version |
As Wireshark uses the npcap library to capture the packets, it is more of a question for the npcap team. Since the virtual ports are not visible to the OS, I suspect they are not visible to npcap either. You could work with the npcap team to make the interfaces seen.
Another option would be to use an extcap interface. But then you would somehow need to have access to the packets on the virtual ports. If you can somehow export the packet data on the virtual ports, you could write an extcap module to make those packets available in WIreshark.
See: https://www.wireshark.org/docs/man-pages/extcap.html
