How to use Wireshark to capture local loopback traffic for analysis for Qlik software

[PadmaPriya]

If you are trying to capture traffic to and from an SQL Server, do not use Wireshark, because it does not readily display such traffic. Instead, use the Microsoft Message Analyzer. For information about how to use Microsoft Message Analyzer to capture SQL Server traffic for analysis, see Data Collection - How to use Microsoft Message Analyzer to capture SQL Server traffic for analysis.

On the system where you want to capture loopback traffic, do the following:

1. Download and install the latest version of Wireshark from https://www.wireshark.org/.
2. During the installation, a dialog displays where you can choose to install npcap. Accept the default settings and install npcap.
3. To start capturing traffic, run Wireshark.
4. At the initial screen, select and double-click the Adapter for loopback traffic capture adapter.

Wireshark now captures loopback traffic. After the traffic has been captured, stop and save the Wireshark capture.

Notes

• To capture local loopback traffic, Wireshark needs to use the npcap packet capture library.
• This package is included with the later versions of Wireshark. But older versions included the WinPcap library, which does not support loopback capture.
  If you have an older version of Wireshark on your Qlik server, remove both Wireshark and WinPcap, and then install the latest Wireshark version.

Related Content:

Wireshark SampleCaptures

Environment

• Wireshark
• Qlik Sense Enterprise on Windows
• QlikView
• Qlik NPrinting