networking - Capturing windows XP localhost TCP traffic -

i have done fair amount of reading on subject - capturing windows xp localhost tcp traffic.

there seem couple of methods:

1/using rawcap.exe wont work windows xp handles localhost not through normal network stack

2/using tool socketsniff @ winsock calls particular process (i may try this)

3/using proxocket dlls output cap file winsock traffic particular application (may not work depending on version of application or version of windows.

4/wireshark wont work in scenario same kind of reason rawcap.exe wont work

i have read in detail article on wireshark https://wiki.wireshark.org/capturesetup/loopback , question references section:

so let's decide install windows loopback adapter. next need :

    1. go ms loopback adapter properties, set ip 10.0.0.10, mask 255.255.255.0 2. ipconfig /all , @ mac-id new adapter. 3. arp -s 10.0.0.10 <mac-id> 4. route add 10.0.0.10 10.0.0.10 mask 255.255.255.255 5. test: "telnet 10.0.0.10" 

now there things dont understand explained sequence of steps. have application want watch makes calls 127.0.0.1 or 'localhost'.

1. i install ms loopback adapter, set ip , mask.
2. i grab mac address.
3. i via arp add static cache entry 10.0.0.10 resolves physical device.
4. i add route 10.0.0.10 itself, 10.0.0.10

now @ point surely capturing on ms loopback adapter still wont pickup 127.0.0.1 or localhost it? pick if had application pointing @ 10.0.0.10 'localhost'?

can please clarify - perhaps understanding incorrect , indeed work??

i decided try socketsniff - , solved problem entirely - picked calls application wanted monitor making , able continue happily programming after that!