In a developement environement (where often the browser and the http server are on the same machine) i want to study the exact detail of authentication schemas. So i need to trace down every http request/response.
- I’ve tried WireShark, that is very promising. But actually on
windows machines there is a problem in sniffing the traffic on
loopback interface. - Then i’ve tried a browser plugin, HttpFox
0.8.10 of Firefox 12. It is good in showing requests and responses, but in the specific case of authentication, it doesn’t correctly
show the “double hop” authentication, it “collapses” the first
request (the Unauthorized status code) with the next, successful
one. - Then i’ve tried to work with the logs of httpd, that is my
actual server, but it is required a not trivial effort to create a
log that contains all the request such as headers (the authorization
header).So it doesn’t seem a good “debug” technique.
Are there other possibilities?
Go with Wireshark. The answer to this question will address the loopback issue. Wireshark is the best because it really understands the formatting of everything related to HTTP (so long as you are not using HTTPS).