This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Can’t seem to see locally sent packets

0

Hello

I am new to WireShark and it seems really good!

I have a C# client server application which is sending small packets over TCP using the TCPClient and NetworkStream objects.

They are sent to 127.0.0.1 port 3000

When I analyse my main network device, I can't seem to see the packets. I know they are sent because the client and server respond to them.

I do though seem to get a result, but they are recorded in WireShark as SMB packets. The client and server exchange 3 packets and when I run the application, I get 3 SMB packets recorded on WireShark.

Do you know what I could be missing, or do you need some more information?

Thank you all very much for your time and help,

Richard Hughes

asked 07 Sep '11, 01:30

rhughes's gravatar image

rhughes
6113
accept rate: 0%

edited 22 Mar '12, 14:20

multipleinterfaces's gravatar image

multipleinte...
1.3k152340


2 Answers:

2

See here.

answered 07 Sep '11, 01:37

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Cheers, I didn't know about that.

I'll have to host the server app on a different machine as loopback network adapters on Win7 seem a bit unreliable from what I have read.

(07 Sep '11, 04:35) rhughes

0

Can Microsoft Network Monitor capture local traffic? Or does it have he same limitation? If it can do that capture, you could export it for examination in Wirehark.

answered 22 Mar '12, 13:51

inetdog's gravatar image

inetdog
16717
accept rate: 14%