Tool Rawcap for sniffing loopback address data

The local loopback address, which does not belong to any one of the class address classes. It represents the local virtual interface of the device, so the default is to be considered an interface that will never go down. There are similar definitions in the Windows operating system, so it is usually possible to ping the local loopback address before the network card is installed. It is generally used to check whether the local network protocol, the basic data interface, etc. are normal.

Wireshark and other sniffer tools sniff the data through the NIC, and the loopback address data does not pass through the network card, so Wireshark cannot get the relevant data.

Rawcap is a sniffer tool under windows that uses the original socket implementation to sniff data from a loopback address.

This article is from the IT Technology sharing blog, so be sure to keep this source http://watertoeast.blog.51cto.com/8489855/1710958

Tool Rawcap for sniffing loopback address data