Solved

Why does fiddler listen on port 8888?

Posted on 2015-02-13
7
5,569 Views
Last Modified: 2015-02-13
Fiddler Web Debugging Proxy by default listens on port 8888.  

1) What is the significance of port 8888?  
2) It seems that as a rule, internet browsers use port 8888 to send and receive traffic, correct?
3) If so, then it seems like this is a majorly important port, so why wouldn't this be indicated when I search on port 8888 e.g. under "Well known ports"?
0
Comment
Question by:SAbboushi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
7 Comments
 
LVL 81

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 150 total points
ID: 40608862
it is an unregistered port that they 'fiddler' may pay for and get it registered to them
https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.txt
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 40608942
Fiddler works by intercepting traffic from the web browser.  They do that by redirecting the web browser to some other port, 8888 in this case, reading the packets and then passing the traffic on thru the standard ports.  It's the same technique used by your anti-virus also.
0
 

Author Comment

by:SAbboushi
ID: 40609104
it is an unregistered port that they 'fiddler' may pay for and get it registered to them
Thanks David.  The link I provided shows 2 "official" registrants for port 8888 (one of them is also listed in your link).  Since Fiddler has been around a long time and hasn't registered the port, it seems to me that software (e.g. Fiddler) which has need of a port for a non-standard use will likely select a rarely used port as default.  Is that the likely answer to my question?

Fiddler works by intercepting traffic from the web browser.  They do that by redirecting the web browser to some other port, 8888 in this case, reading the packets and then passing the traffic on thru the standard ports.
Thanks David.  So I was mistaken: web browsers don't use port 8888 as a rule to send/receive traffic?  What port do they use?

So you're saying that fiddler reroutes the http/https traffic from the default browser ports to port 8888 which they are listening to and then reroutes back to the default browser ports?

In my case, I'm monitoring SoapUI traffic (not browser).  Fiddler didn't see its traffic until I enabled a proxy within SoapUI's preferences for Host: localhost, Port: 8888.  But I don't understand what I did (i.e. the mechanics of what is going on), hence my questions.

Appreciate you guys taking the time to help.  Thanks--
0
Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

 

Author Comment

by:SAbboushi
ID: 40609120
Ah - I think I get it: somehow (in a manner I don't understand) Fiddler reroutes the foreign address for the http/https requests generated by my browsers to port 8888; then after Fiddler intercepts the packets, it forwards them to the originally designated foreign address.  Correct?
0
 
LVL 81

Expert Comment

by:David Johnson, CD, MVP
ID: 40609121
yes it is a man-in-the-middle proxy
0
 
LVL 83

Accepted Solution

by:
Dave Baldwin earned 350 total points
ID: 40609134
HTML pages using HTTP protocol are normally communicated over port 80.  Fiddler is setup to create a proxy on some other port in your web browser.  You had to redirect SoapUI traffic because the automatic proxy wasn't created in SoapUI since it is not a browser with the Fiddler plugin / add-on.

Fiddler might still work if your page is on some other port in the browser but I don't know.

HTML pages using HTTPS protocol are normally communicated over port 443.  Fiddler has to create a temporary SSL certificate to monitor that traffic.  It can do it but does not do it unless you tell it to.
0
 

Author Closing Comment

by:SAbboushi
ID: 40609212
Thanks Guys--
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Ready to improve network connectivity? Watch this webinar to learn how SD-WANs and a one-click instant connect tool can boost provisions, deployment, and management of your cloud connection.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question