Traffic from container with host mode networking don't show up in Wireshark

[zasdaym]

I'm trying to capture network traffic using Wireshark on interface lo0 from a container in Orbstack running in host mode. I expected to see the traffic in Wireshark, but nothing showed up.

docker run --network host --rm -ti --entrypoint ash alpine
Unable to find image 'alpine:latest' locally
latest: Pulling from library/alpine
Digest: sha256:0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5
Status: Downloaded newer image for alpine:latest
/ # ping -c 3 127.0.0.1
PING 127.0.0.1 (127.0.0.1): 56 data bytes
64 bytes from 127.0.0.1: seq=0 ttl=64 time=0.569 ms
64 bytes from 127.0.0.1: seq=1 ttl=64 time=0.218 ms
64 bytes from 127.0.0.1: seq=2 ttl=64 time=0.218 ms

--- 127.0.0.1 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 0.218/0.335/0.569 ms
/ #

[kdrag0n]

This is expected behavior for ICMP. UDP and TCP traffic should show up.

[zasdaym]

Thanks, any explanation or reference for this?

[kdrag0n]

Our implementation only support UDP and TCP.