为什么我无法在Wireshark中看到c＃应用程序生成的UDP流量？

Question

I am using the UDPClient class to send and receive messages on my loopback address. The executables are also interacting with each other. But why doesnt the traffic appear in wireshark?

BTW I am running windows inside parallels on OSX and can select only 1 interface that is my intel pro net network card in wireshark.

Answer 1

Here's the key phrase:

on my loopback address

The loopback address is a complete additional interface, not just an address. Wireshark is configured to listen on a specific interface, and I'm guessing the loopback interface is not it.

Answer 2

The loopback traffic is not captured by the Net Packet Filter driver. One workaround is to send it to the IP address of your Intel Pro NIC. In my experience, this is enough to hit the NPF capture driver and show up in Wireshark. (Well, to be accurate, my experience in that matter doesn't involve a VM so YMMV).

Of course, the listener should be bound to that NIC IP to receive the packets (and not only to localhost).