[Winpcap-users] Monitoring network traffic between two processes on the same host?

Richard Horton richard.horton at solstans.co.uk
Fri Jun 6 07:49:33 GMT 2008


2008/6/5 Brockus, David P. <dbrockus at ou.edu>:
> Hello,
>
> Is there a way to use WinPcap to monitor network traffic between two
> processes on the same host?
>

I would not have thought this would possible,based on (my admittedly
low) knowledge of pcap. As both processes reside on the same server
traffic to and from each process does not need to be sent to the
network card to be sent to the other process - this can be done in the
IP stack itself. The pcap packet capture driver can only capture
network traffic which is sent down or up from network card driver
layer.

-- 
Richard Horton
Users are like a virus: Each causing a thousand tiny crises until the
host finally dies.
http://www.solstans.co.uk - Solstans Japanese Bobtails and Norwegian Forest Cats
http://www.pbase.com/arimus - My online photogallery


More information about the Winpcap-users mailing list