本地主机嗅探器(Windows 操作系统) [英] Sniffer for localhost (Windows OS)

问题描述

我正在寻找可以在 Windows 中使用环回地址的嗅探器.

I am looking for a sniffer that can work with the loopback address in Windows.

到目前为止，我发现 Microsoft Network Monitor 是一个不错的工具，但是对于 localhost 它没用，因为在 Windows 上，localhost 数据包不会通过常规网络堆栈，因此它们对于像 MS Network 这样的以太网嗅探器是不可见的监控.

So far, I found Microsoft Network Monitor which is a nice tool, but for localhost it's useless because on Windows, localhost packets don't pass through the regular network stack, so they're invisible to an ethernet sniffer like MS Network Monitor.

如何调试在环回机制中发送数据的应用程序?任何可以与本地主机一起使用的好的(开源)嗅探器?

How do you debug applications that send data in the loopback mechanism? Any good (open source) sniffers that can work with localhost?

更新:如果您有使用工具的经验，最好有一个简短的描述以供将来参考

UPDATE: If you have experience with a tool, it would be nice to have a short description for future reference

推荐答案

我遇到了这个问题，但经过大量研究后却一无所获.基本上所有可用的嗅探器都依赖于网络驱动程序堆栈，Windows 不会通过它公开本地主机调用.

I was faced with this issue and got nowhere after a lot of research. Basically all available sniffers rely on the network driver stack, and Windows don't expose localhost calls through it.

我最终使用的是一个名为 SocketSniffer 的工具，它可以窥视 Winsock 的调用并监控 TCP、UDP 套接字连接.它帮助我调试了一个只有在 win 2k3 中出现的应用程序问题.

What I ended up using was a tool called SocketSniffer, that peeks at Winsock's calls and monitor TCP, UDP socket connections. It helped me debug an application problem that only occurred in win 2k3.

其下载站点位于 http://www.nirsoft.net/utils/socket_sniffer.html

请注意，这在 Windows 8 中不再有效.Microsoft Message Analyzer 现在能够嗅探开箱即用的环回流量.官方博文:http://blogs.msdn.com/b/winsdk/archive/2014/08/15/rejoice-we-can-now-capture-loopback-traffic.aspx

Note that this no longer works in Windows 8. Microsoft Message Analyzer is now capable of sniffing loopback traffic out of the box. Official blog post here: http://blogs.msdn.com/b/winsdk/archive/2014/08/15/rejoice-we-can-now-capture-loopback-traffic.aspx

这篇关于本地主机嗅探器(Windows 操作系统)的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！