Windows 换回网卡(lo) 抓包

Wireshark 在Windows上不能对环回网卡lo进行抓包，因为：

Windows TCP/IP stack does not implement a network loopback interface, as found in other TCP/IP stack like lo* interfaces in BSD systems.Thus, it is not possible to sniff network traffic using the typical Windows packet capture driver, WinPcap.

 

其实，不仅本地环回的lo上的数据包抓不着，本机访问本机的非lo接口的数据包也是抓不着的，应该是数据包抄近道了

 

参考：

• https://www.cnblogs.com/followyourheart/archive/2012/11/01/2749783.html

替代办法： https://www.netresec.com/index.ashx?page=RawCap