What you should do is to run RawCap, which is a sniffer that can capture traffic to/from the loopback interface in Windows. Just start it with "RawCap.exe 127.0.0.1 loopback.pcap".
You can then open up loopback.pcap in Wireshark or NetworkMiner to look at the network traffic.
I second the Microsoft Network Monitor (though this link works better at the time of writing) suggestion from Thomas Owens. Also, this post suggests that to get the loopback address, try doing:
route add <Your Machine's IP> <Your Router's IP>
This takes locally-generated packets for the local interface and sends them off to your router... which sends them back.
NOTE: To get your machine back to normal operation, make sure you delete the route when you're finished using:
Wireshark wiki 上有一个页面可以解决该问题。 简而言之，您无法在 Windows 计算机上执行此操作，但可能有一些解决方法。
There is a page on the Wireshark wiki that addresses the problem. Short answer is, you can't do it on a Windows machine, but there might be some workarounds.
发布评论
评论（7）
你绝对应该尝试 Npcap，它与 Wireshark 完美配合，可以捕获 Windows 中的环回流量，请参见此处：
https://wiki.wireshark.org/CaptureSetup/Loopback
You should definitely try Npcap, it works perfectly with Wireshark to capture loopback traffic in Windows, see here:
https://wiki.wireshark.org/CaptureSetup/Loopback
您应该做的是运行 RawCap，它是一个嗅探器，可以捕获 Windows 中往返接口的流量。 只需使用“RawCap.exe 127.0.0.1 Loopback.pcap”启动即可。
然后，您可以在 Wireshark 或 NetworkMiner 中打开 Loopback.pcap 来查看网络流量。
您可以在这里找到 RawCap：
http://www.netresec.com/?page=RawCap
祝你好运！
What you should do is to run RawCap, which is a sniffer that can capture traffic to/from the loopback interface in Windows. Just start it with "RawCap.exe 127.0.0.1 loopback.pcap".
You can then open up loopback.pcap in Wireshark or NetworkMiner to look at the network traffic.
You can find RawCap here:
http://www.netresec.com/?page=RawCap
Good Luck!
如果您不想付费，请尝试以下操作： CommView
不过，它似乎有效评估版不显示
完整的数据包。
If you don't care to pay, try this: CommView
It seems to work, however the Evalution version doesn't display the
complete packets.
您是否尝试安装 MS Loopback Adapter 并尝试使用您最喜欢的嗅探应用程序嗅探该适配器？
另外，如果我没记错的话，luy NAI Sniffer link 确实曾经具有环回嗅探功能，但我已经使用了一段时间了解决方案...
Did you try to install the MS Loopback Adapter and try sniffing on that adapter with you favorite sniffing application?
Also if I remember correctluy NAI Sniffer link did use to have loopback sniffing capabilities, but it's been a while I used either solution...
我不确定它是否可以，但是您是否看过 Microsoft 网络监视器？ 这可能是一个选择。
I'm not sure if it can or not, but have you looked at Microsoft Network Monitor? It might be an option.
我支持 Microsoft 网络监视器 （尽管在撰写本文时此链接效果更好）托马斯·欧文斯的建议。 另外，这篇文章建议环回地址，尝试执行：
route add; <您的路由器的 IP>
这会获取本地接口本地生成的数据包，并将它们发送到您的路由器...路由器将它们发回。
注意：要让您的机器恢复正常运行，请确保在使用完毕后删除该路由：
路由删除 <您的机器的 IP>
I second the Microsoft Network Monitor (though this link works better at the time of writing) suggestion from Thomas Owens. Also, this post suggests that to get the loopback address, try doing:
route add <Your Machine's IP> <Your Router's IP>
This takes locally-generated packets for the local interface and sends them off to your router... which sends them back.
NOTE: To get your machine back to normal operation, make sure you delete the route when you're finished using:
route delete <Your Machine's IP>
Wireshark wiki 上有一个页面可以解决该问题。 简而言之，您无法在 Windows 计算机上执行此操作，但可能有一些解决方法。
There is a page on the Wireshark wiki that addresses the problem. Short answer is, you can't do it on a Windows machine, but there might be some workarounds.