Ethereal-users: Re: [Ethereal-users] Capturing packets addressed to loopback interface

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Michael G. Soulakis" <Mike.Soulakis@xxxxxxxxxxx>
Date: Fri, 28 Jan 2005 13:24:32 -0600
Guy Harris wrote:

Michael G. Soulakis wrote:

Can someone tell me how to select the loopback interface for packet capture on Solaris.


Step 1: wait for the Solaris source to appear on opensolaris.org.

Step 2: download Solaris source.

Step 3: modify Solaris source so that the loopback device is implemented
by a DLPI driver.

Step 4. build, test, and debug resulting Solaris source.

Step 5. use tcpdump/snoop/Ethereal/etc. on resulting Solaris system.

Or, to put it another way, that's an intrinsic limitation of the way
Solaris's network stack works; it's not something a user can work
around, or even something that Ethereal or libpcap can be changed to fix.

(does not exist in /dev/lo)
lo0 shows up in the interface list,


Which interface list?  The one you get from "ifconfig -a", or the one
you get from Ethereal?

thanks for the response.  It is showing up on Ethereal's interface list.
It also list logical interfaces that cannot be sniffed independently (e.g.e qfe0:1 vs qfe0)
but they are all listed in Ethereal's interface list pull-down.

If it shows up in the one you get from Ethereal,
that's a bug - it should only show up on OSes that support capturing
traffic on the loopback device (Linux, various BSDs, Digital UNIX,
*possibly* AIX, and perhaps a couple of other ones).

Tha

--

Mike Soulakis

Principal Engineer

Optical Networks Control Plane Architecture

Alcatel NA

(972) 477-6975