Wireshark grasping local loopback packets and fetching data methods _ practical Tips

One: The NPF driver isn ' t running

This error is caused by not opening the NPF service.

NPF, the network packet filter (Netgroup Packet FILTER,NPF), is the core part of WinPcap, which is the component of WinPcap to complete the difficult work. It handles packets transmitted over the network and provides a capture, send (injection) and analytical performance (analysis capabilities) to the user level.

It not only provides basic features (such as grasping packages), but also has more advanced features (such as programmable filter system). The former can be used to constrain a grab session to only a subset of network traffic, which provides a powerful and simple mechanism for statistical network traffic.

The solution is as follows:

(1) Ensure that you have installed WinPcap (this will be prompted to install Wireshark when you installed) can also be downloaded from the official website: Address: http://www.winpcap.org/

(2) at the command prompt, enter: net start NPF prompts to open the drive service successfully. As shown in the following illustration:

If you want to turn off the service, enter: net stop NPF.

Second: Crawl local loopback data

Under Windows, enter the following statement on the command line:

Copy Code code as follows:

Route add 192.168.1.106 mask 255.255.255.255 192.168.1.1metric 1

Among them, 192.168.1.106 is the native IP, 192.168.1.1 is the routing gateway. Nothing else will change.

Note: You need to use native 192.168.1.106 IP when establishing a connection, and you cannot use 127.0.0.1, such as:

Copy Code code as follows:

Socket. Connect ("192.168.1.106", 4530);