Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Simple Http alternative for Wireshark

In web development, I usually use Firebug. But now I have to use Wireshark to monitor Http requests sent by an Android simulator. Wireshark is a fantastic tool, however it is too fat for what I'm doing, and quite painful to copy/paste the request.

So I'm looking for a simpler alternative on Linux Ubuntu.

like image 870
Nicolas Zozol Avatar asked Dec 12 '11 14:12

Nicolas Zozol


People also ask

Is there a better tool than Wireshark?

There are more than 50 alternatives to Wireshark for a variety of platforms, including Windows, Linux, Mac, iPhone and Android. The best alternative is tcpdump, which is both free and Open Source. Other great apps like Wireshark are Fiddler, CloudShark, Intercepter-NG and Microsoft Network Monitor.

Is Wireshark still used?

Wireshark has many uses, including troubleshooting networks that have performance issues. Cybersecurity professionals often use Wireshark to trace connections, view the contents of suspect network transactions and identify bursts of network traffic.

What is the difference between tcpdump and Wireshark?

Tcpdump can do only the basic analysis of some types of traffic like dns queries etc. Whereas, wireshark is way more extensible in protocol and packet analysis, it can decrypt the data payloads if the encryption keys are known, identify data payloads from file transfers like even from smtp, http etc.


1 Answers

Wireshark is mostly bloated due to the GUI front-end; however it has a text-version called tshark that uses substantially less memory... the syntax is very similar to tcpdump...

To capture packets sent to and from a webserver on 192.168.12.14, use this...

tshark -n -i eth0 tcp and host 192.168.12.14 and port 80
like image 177
Mike Pennington Avatar answered Oct 04 '22 11:10

Mike Pennington