packet sniffer?

Problems with the Windows version of XAMPP, questions, comments, and anything related.

packet sniffer?

Postby AndyS01 » 28. March 2013 15:01

I have xampp installed on my laptop to do development that will eventually be released to our company server. On the company server, I can run Ethereal to monitor the GET requests and view detailed packet info. Is there a similar utility that allows me to see the xampp-apache GET requests and detailed packet info that I can run on my laptop? I have Ethereal installed on my laptop, but cannot configure it to do what I want.

Andy
AndyS01
 
Posts: 24
Joined: 24. March 2013 15:58
Operating System: Windows 7

Re: packet sniffer?

Postby JonB » 28. March 2013 18:52

uhh wireshark?
User avatar
JonB
AF Moderator
 
Posts: 3210
Joined: 12. April 2010 16:41
Location: Land of the Blazing Sun
Operating System: Windows XP/7 - Fedora 15 1.7.7

Re: packet sniffer?

Postby AndyS01 » 29. March 2013 15:56

Wireshark asks me to choose an interface. There are 4 listed and I don't know which to use. I tried each one, but when I to a Refresh on my browser, nothing gets captured. I might not have setup the filtering correctly. I'm sure others have done this, but I can't get it working.
AndyS01
 
Posts: 24
Joined: 24. March 2013 15:58
Operating System: Windows 7

Re: packet sniffer?

Postby AndyS01 » 29. March 2013 21:57

I fired off a message to the Wireshark forum and this is the answer they gave me:
Wireshark can't capture requests made to the local machine, that is if you run the browser on the same machine as the web server. This is because the MS network stack recognises that the packet is local so "short-circuits" the packet and the WinPCap driver that Wireshark uses to capture doesn't see the packet.
AndyS01
 
Posts: 24
Joined: 24. March 2013 15:58
Operating System: Windows 7

Re: packet sniffer?

Postby AndyS01 » 29. March 2013 21:59

Perhaps I could modify one of the Apache php/perl files to intercept GET requests related to MiMe multipart handling and log the details to a log file.
AndyS01
 
Posts: 24
Joined: 24. March 2013 15:58
Operating System: Windows 7

Re: packet sniffer?

Postby JonB » 29. March 2013 22:21

Well - phpBB seems to have blown away my post -

I have a suggestion - try using the LAN IP of your XAMPP machine in both the Apache config and in your URL.

:)
User avatar
JonB
AF Moderator
 
Posts: 3210
Joined: 12. April 2010 16:41
Location: Land of the Blazing Sun
Operating System: Windows XP/7 - Fedora 15 1.7.7

Re: packet sniffer?

Postby AndyS01 » 30. March 2013 13:00

I'm sorry to be obtuse but I need an explanation of your suggestion.
o By "LAN IP" do you mean "http://127.0.0.1"?
o And what files do I change to make sure it's in the Apache config?
o Also, by "in your URL", do you mean addressing my web stuff using "http://127.0.0.1/something.html" vs "http://localhost/something.html"?
AndyS01
 
Posts: 24
Joined: 24. March 2013 15:58
Operating System: Windows 7

Re: packet sniffer?

Postby AndyS01 » 30. March 2013 14:06

Please let me explain exactly what I'm trying to do.

I'm trying to determine if the 'formenctype="multipart/form-data"' attribute is actually returning all of the requested data (usually, a file) in multiple packets (true multipart) or in one big packet (not multipart).

So looking at the browser GET requests only confirms that the browser is actually requesting multipart packets, but I want to see what the SERVER sends out.

Andy
AndyS01
 
Posts: 24
Joined: 24. March 2013 15:58
Operating System: Windows 7

Re: packet sniffer?

Postby Altrea » 30. March 2013 14:13

Hi AndyS01,

AndyS01 wrote:o By "LAN IP" do you mean "http://127.0.0.1"?

No. 127.0.0.1 is your loopback network interface.
Your LAN IP is the IP your computer uses to communicate with your network. Very common this is an private IP address.

AndyS01 wrote:o And what files do I change to make sure it's in the Apache config?

\xampp\apache\conf\httpd.conf

AndyS01 wrote:o Also, by "in your URL", do you mean addressing my web stuff using "http://127.0.0.1/something.html" vs "http://localhost/something.html"?

not 127.0.0.1, but your LAN IP address, yes.

best wishes,
Altrea
We don't provide any support via personal channels like PM, email, Skype, TeamViewer!

It's like porn for programmers 8)
User avatar
Altrea
AF Moderator
 
Posts: 11926
Joined: 17. August 2009 13:05
XAMPP version: several
Operating System: Windows 11 Pro x64

Re: packet sniffer?

Postby AndyS01 » 01. April 2013 00:39

Thank you. I did as you suggested and I changed my web page
from http://localhost/mdg/home.xhtml
to http://<my ip address>/mdg/home.xhtml
Now I can go to all of my web content using the new addressing. However, I could not configure Wireshark to capture the server side GET requests. One problem was deciding which of the 4 interfaces to choose. I clicked on all 4 and got lots of messages logged, but none of the HTTP GET requests were there. Can you help me to the next step?

Andy
AndyS01
 
Posts: 24
Joined: 24. March 2013 15:58
Operating System: Windows 7


Return to XAMPP for Windows

Who is online

Users browsing this forum: No registered users and 121 guests