[Winpcap-users] Re: working on the same PC withthenetworkinterface card

[David Chang]

Someone wrote this last year about reading packets on the same machine.  I 
don't know whether it really works or not though???

--------------- BEGIN ---------------
I managed to find a way for Winpcap to capture trafic from local ip address 
to local ip address.Normaly Windows routes this trafic to the loopback 
interface so Winpcap can't capture it.A workaround for this problem is to 
enter these commands from a command prompt.

route add 192.168.0.1 192.168.0.1
arp -s 192.168.0.1 AA-BB-CC-DD-EE-FF

where 192.168.0.1 is your local ip address and AA-BB-CC-DD-EE-FF is the mac 
address of the local ethernet adapter bound to this ip address

The link must be up.
-------------- END --------------

DC

----- Original Message ----- 
From: "Gianluca Varenni" <gianluca.varenni at cacetech.com>
To: <ceo at triplebit.com>; <winpcap-users at winpcap.org>
Sent: Friday, June 15, 2007 9:41 AM
Subject: Re: [Winpcap-users] Re: working on the same PC 
withthenetworkinterface card


>
> ----- Original Message ----- 
> From: <ceo at triplebit.com>
> To: "Gianluca Varenni" <gianluca.varenni at cacetech.com>; 
> <winpcap-users at winpcap.org>
> Sent: Friday, June 15, 2007 12:15 AM
> Subject: Re: [Winpcap-users] Re: working on the same PC with 
> thenetworkinterface card
>
>
>> Is it possible to accomplish that If I install another interface card ?
>> If positive, what else should be dome?
>
> As far as i know no. The problem is that packets are in any case routed 
> internally by the TCP/IP stack, without going on the physical interfaces.
>
> GV
>
>
>>
>> Regards
>>
>> I. Lsher
>>
>>> WinPcap is not able to capture local traffic, i.e. traffic between two 
>>> applications on the same machine. The reason is that the loopback 
>>> interface is managed by the TCP/IP stack, which sits in parallel with 
>>> WinPcap.
>>>
>>> Have a nice day
>>> GV
>>>
>>> ----- Original Message ----- 
>>> From: <ceo at triplebit.com>
>>> To: <winpcap-users at winpcap.org>
>>> Sent: Thursday, June 14, 2007 3:40 PM
>>> Subject: [Winpcap-users] Re: working on the same PC with the 
>>> networkinterface card
>>>
>>>
>>>>I try to run IE with a Web Server - both installed in my same PC. I see 
>>>>no captue with Ethereal. How should I fiter (or configure somehow) to 
>>>>see the packets?
>>>>
>>>> Regards
>>>>
>>>> I. Lesher
>>>>
>>>> _______________________________________________
>>>> Winpcap-users mailing list
>>>> Winpcap-users at winpcap.org
>>>> https://www.winpcap.org/mailman/listinfo/winpcap-users
>>>
>>>
>>>
>>>
>>>
>>
>>
>> _______________________________________________
>> Winpcap-users mailing list
>> Winpcap-users at winpcap.org
>> https://www.winpcap.org/mailman/listinfo/winpcap-users
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users
>