Hi nognew.
tcpdump has the same limitation as Wireshark. I can trace packets and filter by port 80/443 but the HTTPS traffic cannot be decrypted for analysis.
Main Topics
Browse All TopicsIn Windows there are a number of tools that allow you to trace HTTP and HTTPS requests and responses - viewing headers, POST data, etc. One of my favorite tools for this is called HTTPAnalyzer.
When using Linux it seems that my options are limited to either using Wireshark to capture port 80 traffic (which is limited because it is unable to decode HTTPS content) or using Firebug or LiveHTTPHeaders inside of Firefox
Are there any applications for Linux that allow you to trace HTTP / HTTPS traffic?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I read about HTTPAnalyzer now and basically answered question I have asked above. You can set up wireshark to do the same. Although the procedure a might look a bit tricky.
Here are the step by step guide how to do that:
http://www.routerzone.eu/w
Regards,
t.
Hi nognew,
That isn't an acceptable solution since you need to have the private key from the web server in order to decrypt the content. HTTPAnalyzer and similar tools inspect the traffic within the winsock layer - after the decryption occurs. I need a tool that does the same thing, which is why a network packet sniffer is not suitable for my needs.
Thanks.
correct, it seems you need a plugin for Firefox that can show you header etc.
How about Firebug?
I use it a lot to debug AJAX code. You can see packets in console mode.
https://addons.mozilla.org
Regards,
t.
Hi, meapledoo.
Going from what you said:
> That isn't an acceptable solution since you need to have the private key from the web server in order to decrypt the content.
and
> I need a standalone application that can capture and log HTTP/HTTPS traffic from any application, not just Firefox.
and
> I can trace packets and filter by port 80/443 but the HTTPS traffic cannot be decrypted for analysis.
I can conclude, that the correct answer: there is no such tool and moreover, it is impossible.
BTW. Why do you need to decode SSL packets, when not having server's private key and not located on the client's machine?
Your goals seems to me illegal.
Hi Nopius,
I'll agree with you that there is no available tool and will split the points between you and nognew. Thanks for both of your time.
Oh - and the goal is most certainly not an illegal one and I'm offended by the accusation. If you look at tools such as Firebug, HTTP Analyzer, etc - they trace HTTP and HTTPs interactions between the client and web server and allow a developer/analyst to inspect the traffic. There is absolutely nothing illegal about that. My goal was simply to find out whether such an application exists for a linux os.
Business Accounts
Answer for Membership
by: nognewPosted on 2009-01-28 at 08:08:34ID: 23487876
Hello!
perhaps tcpdump is quite useful utility.
Regards,
t.