Windows loopback (127.0.0.1) traffic is short-circuited inside tcpip.sys, completely bypassing the NDIS network driver layer. As a result, GetIfEntry / GetIfTable counters are always 0. This is a ...