Can I set up Wireshark to capture on a virtual IP configured on the local loopback subnet (i.e. 127.0.0.2)?

asked 2018-11-20 19:11:12 +0000

I have configured a set of virtual IPs on the local loopback subnet (i.e. 127.0.0.2->6) of my CentOS 6.10 VM. This is necessary to support testing in an environment where I can't simply add conventional VIPs to the NIC. I am trying to figure out how to configure Wireshark to capture traffic on one of these loopback VIPs, lo:1 (aka 127.0.0.2). I see LO in the interface list, but none of the others.

lo:1 Link encap:Local Loopback inet addr:127.0.0.2 Mask:255.224.0.0 UP LOOPBACK RUNNING MTU:65536 Metric:1

Any ideas? There's no trace of my traffic on lo (127.0.0.1), as expected.

Kind regards, -Kirk

edit retag flag offensive close merge delete

add a comment

2 Answers

Sort by » oldest newest most voted

answered 2018-11-21 07:55:56 +0000

Jaap

13742 ●711 ●115

The 'others' are aliases of the loopback interface lo, where alias means 'other name for same thing'. In this case the same thing is the interface lo. So what you do is capture on lo and see the traffic for the aliases (127.0.0.2 ...) as well as the main address (127.0.0.1). It will all be on the same device, and that is what you capture on, not on an address.

edit flag offensive delete link

add a comment

answered 2018-11-20 22:55:46 +0000

thetechfirm
96 ●4 ●41 ●16 http://www.thetechfirm...

npcap is supposed to support that. just wrote an article on it https://www.networkcomputing.com/netw...

edit flag offensive delete link

Comments

I appreciate your quick reply, but I don't think I can use npcap. It appears to be a Windows driver, and I'm running on CentOS. But this suggests I might need to look at Libpcap's capabilities. Again, thanks for your help.

Yonaguska ( 2018-11-20 23:08:07 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Can I set up Wireshark to capture on a virtual IP configured on the local loopback subnet (i.e. 127.0.0.2)?

2 Answers

Comments

Your Answer

Question Tools

Stats

Related questions

Can I set up Wireshark to capture on a virtual IP configured on the local loopback subnet (i.e. 127.0.0.2)? edit

2 Answers

Comments

Your Answer

Question Tools

Stats

Related questions

Can I set up Wireshark to capture on a virtual IP configured on the local loopback subnet (i.e. 127.0.0.2)?