Is there a way to get wireshark to capture packets sent from/to localhost on Windows?
Solution 1:
There's a WIKI Entry about exactly this issue on the wireshark homepage.
They also mention specifics about the loopback interface regarding Windows - you could be running just into that.
You can't capture on the local loopback address 127.0.0.1 with a Windows packet capture driver like WinPcap.
Solution 2:
In Wireshark you need to choose the lo0 interface... not En0 or En1.
Go to:
- Show the capture options
- Under "Interface" choose: lo0
- Capture and you'll see a bunch of 127.0.0.1 communication
Solution 3:
you can use RawCap Application to capture loopback packets and save them in a pcap file ... and then you can open it using Wireshark