Wireshark mailing list archives
Re: disabling loopback
From: Guy Harris <guy () alum mit edu>
Date: Fri, 27 Jan 2012 10:34:05 -0800
On Jan 27, 2012, at 9:53 AM, <Tim.Poth () bentley com> wrote:
On Jan 27, 2012, at 12:46 PM, Andrej van der Zee wrote: I was wondering if there is a way to prevent packets sent to a local IP address to be shortcut-ed in the kernel. I want them to show up in the tcpdump. How could I do this on Ubuntu?http://wiki.wireshark.org/CaptureSetup/Loopback
The relevant part of which is "you can capture on the loopback interface on Linux". I.e., at least on Linux (and on *BSD and Mac OS X and some other OSes listed there), you *can* capture packets that are shortcutted in the kernel - capture on the loopback interface ("lo" on Linux, "lo0" on *BSD/Mac OS X and at least some of the other OSes). ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- disabling loopback Andrej van der Zee (Jan 27)
- Re: disabling loopback Tim.Poth (Jan 27)
- Re: disabling loopback Guy Harris (Jan 27)
- Re: disabling loopback Andrej van der Zee (Jan 28)
- Re: disabling loopback Maynard, Chris (Jan 28)
- Re: disabling loopback Guy Harris (Jan 27)
- Re: disabling loopback Tim.Poth (Jan 27)