Capture localhost (127.0.0.1) system packets using RawCap

Hi friends,

Today I am going to share the knowledge of capturing network packets in local system i.e. localhost.

Using RawCap utility, you can capture the loopback adapter packets which are our localhost packets.

Procedure

Download the RawCap.exe from Netresec website url
http://www.netresec.com/?page=RawCap
Once you download it
Open command prompt with administrator privileges
You have the following options while running the RawCap.exe

Syntax

RawCap.exe
-c <-> Stop capturing after the specified packet count reached
-f <-> Flush each packet without buffering
-s <-> Stop capturing after the specified time limit

Example 1:
RawCap.exe 127.0.0.1 dump.pcap
Note: Ctrl + C to stop the capturing

Example 2:
RawCap.exe -c 1000 127.0.0.1 dump.pcap
After 1000 packets, the capturing will stop

Please send your feedback and comments to psrdotcom@gmail.com