Ask Your Question
0

wireshark is not seeing 127.0.0.1 though i have installed npcap and have all interfaces checked

asked 2022-06-18 04:20:26 +0000

barlbarl gravatar image

updated 2022-06-18 05:33:30 +0000

wireshark is not seeing 127.0.0.1 though i have installed npcap and have all interfaces checked

OS is windows 7

as you see I ping(icmp) google and then ping 127.0.0.1 , my display filter is set to pick up ping/icmp. It picks up pinging google, it doesn't pick up pinging 127.0.0.1

image description

image description

added

Wireshark Version 3.4.2

Npcap listed in programs and features, installed 25th December 2020. If I double click it it says it's NP Cap 1.00 I don't know how to get a version from npcap beyond that

I can't see an npcap.dll listed under help..about..plugins, not sure if anything like that should be.

edit retag flag offensive close merge delete

Comments

npcap can be downloaded and installed directly from their site.

grahamb gravatar imagegrahamb ( 2022-06-18 05:33:39 +0000 )edit

just added to my question, thanks

barlbarl gravatar imagebarlbarl ( 2022-06-18 05:33:42 +0000 )edit

since updating npcap from their site, so now npcap 1.6, wireshark is now not capturing anything

barlbarl gravatar imagebarlbarl ( 2022-06-18 06:40:44 +0000 )edit

That would be an issue for the npcap folks then. You could try uninstalling npcap, rebooting and then installing it again.

grahamb gravatar imagegrahamb ( 2022-06-18 07:13:02 +0000 )edit

ok so I see the reason it wasn't capturing anything was because I had selected LAN. Because a) a WLAN e.g. my "Wireless Connection 6", is a LAN. and b)all interfaces listed in the capture options , made me think it'd show traffic/packets from all interfaces especially with all the tickboxes in the "manage interfaces" screen, next to all of them. Now I see I had to choose one interface specifically, in the capture options screen. And I see that if I choose loopback, that works and then I just see loopback.

barlbarl gravatar imagebarlbarl ( 2022-06-18 15:35:29 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2022-06-18 05:21:29 +0000

grahamb gravatar image

The loopback traffic should show up on the "Adaptor for loopback traffic capture interface". That works for me (Win 10, Wireshark 3.7.1, npcap 1.60).

What version of Wireshark and npcap are you using? See the Wireshark Help -> About Wireshark -> Wireshark tab for the info

Presumably you're aware that Win 7 is obsolete and no longer supported? The latest Wireshark version to officially support it is 3.2, I'm not sure about any npcap limitations.

edit flag offensive delete link more

Comments

Thanks yeah I think main thing was I was confused by the GUI as I hadn't used it for a while. All interfaces being checked in managed interfaces isn't relevant, as it only shows packets from one interface at a time. So if I choose my wireless network adaptor, which is "Wireless Network Connection 6" that won't include 127.0.0.1. And also I see each item in the list is an individual interface so LAN won't isn't any LAN, it's the name of a wired adaptor and doesn't include the WLAN.

barlbarl gravatar imagebarlbarl ( 2022-06-19 01:58:41 +0000 )edit

All interfaces being checked in managed interfaces isn't relevant, as it only shows packets from one interface at a time.

I don't think that's correct, Wireshark should capture on all interfaces selected for caprure and does so for me.

If an answer has solved your issue, for the benefit of others that may have similar query please accept the answer by clicking the checkmark icon to the left of it.

grahamb gravatar imagegrahamb ( 2022-06-19 05:12:38 +0000 )edit

oh I see I can do ctrl + click multiple ones. Yes now I get traffic from multiple interfaces. e.g. my wireless lan interface and the loopback interface. Thanks

barlbarl gravatar imagebarlbarl ( 2022-06-19 05:27:31 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2022-06-18 04:16:24 +0000

Seen: 925 times

Last updated: Jun 18 '22