IMPORTANT: If you're trying to capture traffic to and from an SQL Server,
do not use Wireshark, because it doesn't readily display such traffic. Instead, use the
Microsoft Message Analyzer. For more information, see
KB91434 - Data Collection - How to use Microsoft Message Analyzer to capture SQL Server traffic for analysis.
On the system where you want to capture loopback traffic, do the following:
- Download and install the latest version of Wireshark.
During the installation, a dialog displays where you can choose to install npcap. Accept the default settings, and install npcap.
- To start capturing traffic, run Wireshark.
- At the initial screen, select and double-click the Adapter for loopback traffic capture adapter.
Wireshark now captures loopback traffic. After the traffic has been captured, stop and save the Wireshark capture.
NOTES:
- To capture local loopback traffic, Wireshark needs to use the npcap packet capture library.
- This package is included with the later versions of Wireshark. But, older versions included the WinPcap library, which does not support loopback capture.
If you have an older version of Wireshark on your ePO server, remove both Wireshark and WinPcap, and then install the latest Wireshark version.
