Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm working with an embedded device that's generating HTTP requests to a server in the cloud; I'd like a good way of sitting in between those devices and seeing a full request response cycle.

I thought about using tcpdump or a proxy server of some kind to watch the traffic but am at a bit of a loss as to what the best way to view the request/response un-altered rather than individual TCP packets.


share|improve this question

Wireshark is smart enough to assemble the TCP conversation into http chatter if that is an option for you?

Or maybe you could proxy through fiddler

share|improve this answer
So I believe the feature you're referring to is Following TCP Streams; I'm wondering if you know of a way to display this on an ongoing basis, rather than having to find each new initial packet for each cycle? In my mind's eye, I was hoping for a way to just keep a window open w/ the latest request/response in it... – Matt Oct 12 '11 at 21:33
The issue with fiddler is that I have an external device (not my computer) that's communicating with the internet server. Fiddler seems to only like to analyze traffic from my machine. I suppose it might do the right thing with my computer acting as the gateway, so I'll try that as well... – Matt Oct 12 '11 at 21:36
You can run fiddler as a local proxy on your computer. I usually have it running locally then tell my web browser to use it as a proxy server, then fiddler then displays what's happening in real time. I know that's not exactly what you're talking about, but the principle is the same. edit Just re-read your comment - yes, you'd have to configure your embedded device to use fiddler as the proxy. – paulos Oct 12 '11 at 21:42
Yes, follow TCP stream is what I'm talking about. I've only ever used it retrospectively once a packet capture has completed. I can imagine it would be tricky to do in real time, especially if your device is not tuned to re-use existing TCP connections. – paulos Oct 12 '11 at 21:53

You can do this with Wireshark. There are filters you can use to focus on HTTP traffic specifically. That coupled with source / destination filters will let you see the request / response chain.

I'm also a fan of Webscarab which is a java based proxy.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.