Ethereal-users: RE: [Ethereal-users] How do I capture packets on localhost ip address127.0.0.1

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Wed, 21 Apr 2004 12:50:37 -0700 (PDT)
Stephen Albright said:
> I am not a Solaris expert, so I am assuming
> the ability to capture on the loopback is available.

Your assumption is incorrect; Solaris, unlike Linux, Digital UNIX, and the
BSDs, does *not* support capturing on loopback interfaces.  See the
"supported media" page:

    http://www.ethereal.com/media.html

for information on the types of network devices on which libpcap/WinPcap
(the capture library used by Ethereal - and tcpdump/WinDump, and snort,
and a number of other network traffic capture-and-analysis programs -
uses) can capture traffic.  (In most cases, a "No" means that the
underlying OS doesn't support it, so libpcap/WinPcap can't support it.)