Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I have found SocketSniff to be very useful for troubleshooting network applications (like web browsers, email clients, etc). It can sniff wireless and loopback traffic without using a proxy or WinPCap. It will show you only the traffic from the executable you select, which is exactly what I need.
I would love to build and extend a similar tool. Does anyone know how this tool works? Is there a simple SDK call to listen in on all TCP traffic from an executable?
I expect that it uses code injection and IAT patching to hook the various winsock functions and then simply intercepts the calls and dumps the data that is being passed.
OR, it may use a layered service provider…