Viewing the loopback interface on Solaris 10 (using snoop or another tool)

localloopbacksnoopsolarissolaris-10

I am trying to use snoop on solaris 10 to detect traffic between a client and server both located on my machine. Question: I just want to verify that I should use the loopback interface for this.

So now for the real question.

I have found a few posts that suggest that you cannot use snoop on Solaris to listen to a loopback interface. Can someone verify this for me. I have found a few threads that seems to suggest this but most of them are fairly old (see links at bottom).

Has this problem been solved? Is there a way to listen to a loop back interface on Solaris 10? (Using snoop or another method. My assumption is that if snoop will not work something like wireshark will not work either).

This is what I have tried:

% sudo snoop -d lo0

Which results in this:

snoop: cannot open "lo0": DLPI link does not exist

Thanks

Links

http://forums.sun.com/thread.jspa?threadID=5252240
http://www.mail-archive.com/networking-discuss@opensolaris.org/msg01860.html
http://www.derkeiler.com/Mailing-Lists/securityfocus/focus-sun/2002-08/0007.html
http://opensolaris.org/jive/thread.jspa?messageID=175240

Best Answer

The posts are correct, you cannot snoop loopback traffic on solaris. You can't tcpdump it, you can't wireshark it. You can't dtrace it. Many have tried.

OpenSolaris supports it (via the clearview project).

Related Topic