/egilh

Learning by doing

Tools for debugging http and https traffic

Posted on Monday, August 18, 2008 9:14 PM

I spend a lot of time troubleshooting web applications. My Swiss army tool of choice for all network related issues is WireShark but it falls short when it comes to analyzing SSL encrypted traffic.

FireFox takes forever to load compared to IE7 but its wide range of add-ons can be a life saver at times for developers. I am a heavy user of:

  • User Agent Switcher which quickly lets me change the user agent of the browser
  • SwitchProxy lets you quickly swap between proxies. Proxy configuration scripts are great if you always use the same proxies but I frequently have to force a specific proxy to test different web application behaviors.
  • LiveHTTPHeaders plugs into FireFox so it is able to see all the http traffic in real time. You can filter the request using regular expressions and see https requests in clear text!

Fiddler is also able debug https but it relies on a "man-in-the-middle" approach which has some limitations.




Feel free to drop a few cents in the tip jar if this post saved you time and money

Feedback

# re: Tools for debugging http and https traffic

8/19/2008 8:29 AM by Michele

I completely agree with you but in addition to yours I use:
- Web Developer: in a simple toolbar you can check whatever part of a page and the behaviour of the browser (e.g. enable/disable cache, cookies, images, css, javascript support but also see response headers and validate the sent code)
- Modify Headers: that let you change and add headers to your request so that you can change virtually everything of your call (e.g. to disable the encoding method so that you can read the traces in clear text not (deflated or gzipped))
- Force Content Type: Via regular expression you can force the browser to change the received content type so that it can be viewed. It is very useful in mobile environments since let you convert multipart Content-Type (not managed by Firefox) to a simple text/html Content-Type and let you see the page.
- ReloadEvery: Let you set a reload timeout so that you can refresh a single page every x seconds.
- WMLBrowser: Let Firefox manage and render WML pages.

About WireShark let me say that if you want a real trace there is no firefox add-on that can match. Even for SSL traffic too since WireShark supports SSL decryption (yes, you need the sever private key but it works.) For the how too please read http://wiki.wireshark.org/SSL
Nevertheless I agree with you that for simple troubleshooting your (a bit ugly) workaround works perfetly and is always ready to use.


Post Comment
Title
 

Name
 

Url

Protected by Clearscreen.SharpHIPEnter the code you see:
Comment