wireshark capture localhost traffic linux

This maeks it easy to copy and paste, email etc. In the case of HTTP traffic, you can see the Headers, then the content all in one file. Wireshark can assemble TCP packets into a linear stream, however this is easier to use.

tcpflow puts all the TCP packets into order and assembles them into the file, so you never see anything about the packets. Wireshark shows you individual packets (and the TCP options and flags). However tcpflow is easier for my cases since it's a level above wireshark. Wireshark, being a proper packet sniffer, can do all of this and more. Why not use a packet sniffer like wireshark? You can make it listen to traffic that goes to the wider internet with other choices of -i, e.g. Since I am running my django debug server locally, I use -i lo (a.k.a. use use sudo) because non-root users are not allowed to look at network traffic The port 8000 part is the standard wireshark/tcpdump expression When you are done, just Control-C that command to stop it. It will create files of the format x.x.x.x.y-a.a.a.a.z (where x.x.x.x and a.a.a.a are the source/destination IP addresses and y and z are the source/destination port numbers). You should start this command in an empty directory. There's a great programe tcpflow ( ubuntu install link), that will capture all/some tcp traffic and put it in an easy to read file.įor example this command captures all traffic on port 8000 (the django debug server ip address) on your local machine If this was a normal webbrowser / web server communication, you could just look at the HTML source.

The first thing you should try to do is to look at what is being sent to/from your server. You are getting some strange problem reported somewhere. Your webserver isn't sending the right data. Let's say you are running a web server on your local machine and it is communicating with another programme, or you are communicating with another web server. Problem - Want to see your network traffic Using tcpflow to see what is being sent on your network Using tcpflow to see what is being sent on your network

Wireshark capture localhost traffic linux