Ethereal, Charles, Fiddler – Web Debugging Tools

I’ve gotten a lot of use out of network packet sniffers recently, in watching the AMF packets travel back and forth between the Flex client and the server, working with a CF socket server, and the Flex gateways.  Fiddler and Ethereal are free, Charles has a 30 day trial, then is a $50 registration, as of this writing.

A screenshot of Charles in action is shown below.  For getting an understanding of what is happening when, and for simulating network delays through throttling (these tools allow this), there is simply no substitution.  The debugging tool in Flex Builder is pretty good, trace is my good friend.  But a tool to watch the client to server communication is quite helpful.  I don’t promote any one over any other.

Theoretically, it would be possible to put something like this together using Flex, and Zinc (for System access), or Apollo.  The Socket class is there, and listening on a socket is one technical challenge that’s mostly ready.  To act as a proxy (listen in between), it’d have to be able to swap out a port on IE (there’s an API call for that).  The tricky part is what’s in the middle:  Organizing the packets  by source, destination, type, and breaking down the inner details so that they’re easily digestible.

///Screenshot of Charles

Advertisements

4 Responses to Ethereal, Charles, Fiddler – Web Debugging Tools

  1. Dawn says:

    what types of things would you look for in the packets that could be a red flag?

  2. Ian C says:

    depends what your goal is. If your looking for exploits to plug then any important variables that might not have server verification. If your looking to improve performance anything that’s potentially un-necessary/redundant.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: