Wireshark-users: Re: [Wireshark-users] Monitoring traffic to & frm a website.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: shartman@xxxxxxxxxxxxxxxxxxxxx
Date: Mon, 14 Sep 2009 09:41:56 -0700
Do you need to really see the packets or do you just need to see the https request/response data. If so you could use a couple of applictions including fiddler, paros, and web scarab. These will allow you to see what is going on at the application level between server and client.
 
-------- Original Message --------
Subject: Re: [Wireshark-users] Monitoring traffic to & frm a website.
From: "Robert D. Scott" <robert@xxxxxxx>
Date: Mon, September 14, 2009 11:46 am
To: "'Community support list for Wireshark'"
<wireshark-users@xxxxxxxxxxxxx>, <deostroll@xxxxxxxxx>

You can also use curl from a command line and walk the page. If you a
windows user, it is available under CYGWin.

robert@Robert ~
$ curl -G https://my.ufl.edu -i
HTTP/1.1 200 OK
RServer: 10.5.176.26:33625
Date: Mon, 14 Sep 2009 15:43:26 GMT
Content-Length: 829
Content-Type: text/html
Last-Modified: Wed, 26 Apr 2006 21:05:18 GMT
Accept-Ranges: bytes

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<!--* ******************************************************************
* Filename: index.html
* Author: DELETED
* Created for: UF Project Bridges
* Creation date: 3-4-03
*
* Update History:
* 8-21-03 Modified by DELETED to allow compatibility with all instances
* 9-03-03 Modified by DELETED to validate with W3C Standards.
*
* Description:
* This file is called during the Portal sign on process.
*
********************************************************************-->
<meta http-equiv="refresh" content="0; url=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>Welcome to myUFL</title>
</head>

<body></body>

</html>


Robert D. Scott Robert@xxxxxxx
Senior Network Engineer 352-273-0113 Phone
CNS - Network Services 352-392-2061 CNS Phone Tree
University of Florida 352-392-9440 FAX
Florida Lambda Rail 352-294-3571 FLR NOC
Gainesville, FL 32611 321-663-0421 Cell


-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@wireshark.org] On Behalf Of Sake Blok
Sent: Monday, September 14, 2009 11:39 AM
To: deostroll@xxxxxxxxx; Community support list for Wireshark
Subject: Re: [Wireshark-users] Monitoring traffic to & frm a website.

On Mon, Sep 14, 2009 at 05:19:32PM +0530, deostroll@xxxxxxxxx wrote:
> There is a secure web page frm which we need to get data from.
> However we cannot browse to the website via our app. It only happens
> via browser. We need to knw the packets of data sent to & frm the web
> page. Is ther a solution 4 this?

If you posess the private key that is used on the secure server, then
you can make a trace and decrypt the traffic.

If the key is not in your posession (which I suspect, otherwise you
would most probably also know what the server is sending and expecting),
then you could use Firefox with the "HttpFox" plugin to look inside the
secure traffic.

Hope this helps,
Cheers,
Sake
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users

mailto:wireshark-users-request@wireshark.org?subject=unsubscribe


___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@wireshark.org?subject=unsubscribe