本地主机的嗅探器（Windows操作系统） [英] Sniffer for localhost (Windows OS)

问题描述

到目前为止，我发现Microsoft网络监视器是一个很好的工具，但是对于本地主机是无用的，因为在Windows上，localhost数据包不能通过常规网络堆栈，所以它们对于像MS网络监视器这样的以太网嗅探器是不可见的。

您调试在环回机制中发送数据的应用程序？任何可以使用本地主机的好的（开放源代码）嗅探器？

更新：如果您有使用工具的经验，那么请稍等一下，以备将来参考

解决方案

我面对这个问题，经过大量的研究，没有任何地方。基本上所有可用的嗅探器都依赖于网络驱动程序堆栈，Windows不会透露本地主机调用。

我最后使用的是一个名为SocketSniffer的工具，它会窥视Winsock的调用并监视TCP，UDP套接字连接。它帮助我调试只发生在win 2k3的应用程序问题。

它的下载站点是 http://www.nirsoft.net/utils/socket_sniffer.html

请注意，这不再在Windows 8中可以工作。 Microsoft Message Analyzer 现在可以开箱即可嗅探环回流量。官方博客文章： http://blogs.msdn.com/b/winsdk/archive/2014/08/15/rejoice-we-can-now-capture-loopback-traffic.aspx

I am looking for a sniffer that can work with the loopback address in Windows.

So far, I found Microsoft Network Monitor which is a nice tool, but for localhost it's useless because on Windows, localhost packets don't pass through the regular network stack, so they're invisible to an ethernet sniffer like MS Network Monitor.

How do you debug applications that send data in the loopback mechanism? Any good (open source) sniffers that can work with localhost?

UPDATE: If you have experience with a tool, it would be nice to have a short description for future reference

解决方案

I was faced with this issue and got nowhere after a lot of research. Basically all available sniffers rely on the network driver stack, and Windows don't expose localhost calls through it.

What I ended up using was a tool called SocketSniffer, that peeks at Winsock's calls and monitor TCP, UDP socket connections. It helped me debug an application problem that only occurred in win 2k3.

Its download site is at http://www.nirsoft.net/utils/socket_sniffer.html

Note that this no longer works in Windows 8. Microsoft Message Analyzer is now capable of sniffing loopback traffic out of the box. Official blog post here: http://blogs.msdn.com/b/winsdk/archive/2014/08/15/rejoice-we-can-now-capture-loopback-traffic.aspx

这篇关于本地主机的嗅探器（Windows操作系统）的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！