wireshark is not seeing 127.0.0.1 though i have installed npcap and have all interfaces checked

asked 2022-06-18 04:20:26 +0000

barlbarl
3 ●2

updated 2022-06-18 05:33:30 +0000

wireshark is not seeing 127.0.0.1 though i have installed npcap and have all interfaces checked

OS is windows 7

as you see I ping(icmp) google and then ping 127.0.0.1 , my display filter is set to pick up ping/icmp. It picks up pinging google, it doesn't pick up pinging 127.0.0.1

image description

added

Wireshark Version 3.4.2

Npcap listed in programs and features, installed 25th December 2020. If I double click it it says it's NP Cap 1.00 I don't know how to get a version from npcap beyond that

I can't see an npcap.dll listed under help..about..plugins, not sure if anything like that should be.

edit retag flag offensive close merge delete

Comments

npcap can be downloaded and installed directly from their site.

grahamb ( 2022-06-18 05:33:39 +0000 )edit

just added to my question, thanks

barlbarl ( 2022-06-18 05:33:42 +0000 )edit

since updating npcap from their site, so now npcap 1.6, wireshark is now not capturing anything

barlbarl ( 2022-06-18 06:40:44 +0000 )edit

That would be an issue for the npcap folks then. You could try uninstalling npcap, rebooting and then installing it again.

grahamb ( 2022-06-18 07:13:02 +0000 )edit

ok so I see the reason it wasn't capturing anything was because I had selected LAN. Because a) a WLAN e.g. my "Wireless Connection 6", is a LAN. and b)all interfaces listed in the capture options , made me think it'd show traffic/packets from all interfaces especially with all the tickboxes in the "manage interfaces" screen, next to all of them. Now I see I had to choose one interface specifically, in the capture options screen. And I see that if I choose loopback, that works and then I just see loopback.

barlbarl ( 2022-06-18 15:35:29 +0000 )edit

add a comment

Comments

Thanks yeah I think main thing was I was confused by the GUI as I hadn't used it for a while. All interfaces being checked in managed interfaces isn't relevant, as it only shows packets from one interface at a time. So if I choose my wireless network adaptor, which is "Wireless Network Connection 6" that won't include 127.0.0.1. And also I see each item in the list is an individual interface so LAN won't isn't any LAN, it's the name of a wired adaptor and doesn't include the WLAN.

barlbarl ( 2022-06-19 01:58:41 +0000 )edit

All interfaces being checked in managed interfaces isn't relevant, as it only shows packets from one interface at a time.

I don't think that's correct, Wireshark should capture on all interfaces selected for caprure and does so for me.

If an answer has solved your issue, for the benefit of others that may have similar query please accept the answer by clicking the checkmark icon to the left of it.

grahamb ( 2022-06-19 05:12:38 +0000 )edit

oh I see I can do ctrl + click multiple ones. Yes now I get traffic from multiple interfaces. e.g. my wireless lan interface and the loopback interface. Thanks

barlbarl ( 2022-06-19 05:27:31 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

wireshark is not seeing 127.0.0.1 though i have installed npcap and have all interfaces checked

Comments

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

wireshark is not seeing 127.0.0.1 though i have installed npcap and have all interfaces checked edit

Comments

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

wireshark is not seeing 127.0.0.1 though i have installed npcap and have all interfaces checked