Windows 10: Odd traffic while Wireshark capture loopback interface - normal?

Hello, I am learning Wireshark and auditing packets on my home PC and noticed some odd packets sourced from loopback to loopback. Is this normal Windows traffic? Not sure what to make of it? Any ideas if this is something Windows does? Thanks. Microsoft Windows [Version 10.0.18362.657]




:)

 

Capturing VPN Interface on Windows 10 black holes Traffic with Wireshark

I need to see if some issues that are occurring are due to the network, and want to start on the client to see why google speed test is failing over the VPN on the Windows 10 client. I admin the VPN gateway so I could do a more laborious capture there on my client but I would like to Wireshark capture the VPN adaptor interface. I can do this from the GUI but all traffic stops passing as soon as the capture begins, and starts again as soon as I stop the capture. Happens if I run as normal or admin user. Has anyone else seen this and got a workaround/solution?

 

The Npcap Loopback Adapter

If you want to capture traffic inside a local machine, for example, from one service to another service, you'll have a hard time because that traffic isn't being sent over a network interface, so it can't be captured with conventional sniffing tools.

You can only see that traffic if you could, somehow, create an interface on the loopback (127.0.0.1). That's what NpCap (Nmap packet capture) provides. Nmap is the organization that wrote NpCap.

It's not a 'problem.' It's just a tool.

 

Npcap Loopback Adapter (Dec 2017 Win 10 Update) interfering with VPN?

i am using wireshark and this Npcap adapter got in to my computer while i was installing wireshark but i don't really see the use of Npcap (with what little knowledge i have)

can you please help me understand what this Npcap is and how is it useful in wireshark

Thank you