Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] Capture interfaces (loopback?)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Urwin <richard@xxxxxxxxxxxxxxx>
Date: Tue, 11 May 2004 14:44:05 +0100
On Tuesday 11 May 2004 12:55 pm, Sttf wrote:
> Then why doesn't ethereal capture from the driver that windows uses,
> like all sniffers?

It does. Windows does not pass that driver looped-back traffic.
It does it elsewhere in the network stack. Probably quite high up.

Which sniffer have you seen this behaviour on?

-- 
Richard Urwin