Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can we capture HTTP traffic that goes through an ICS connection?

Full details:

  • I have a PC connected to internet via Ethernet.
  • PC has set up a Wifi Hotspot using Internet Connection Sharing (ICS) to share out internet to mobile devices.
  • I have a mobile device that is connected to the Wifi Hotspot.
  • I want to capture all traffic incoming from the mobile device. And the kicker: Mobile device does not have ability to set proxy settings

This would be easy if the mobile device could set a proxy server, but unfortunately it does not have that ability.

Also, I realize I could use wireshark here, but I need to decrypt https traffic to a server I don't have access to.

share|improve this question
check this page out: there is a link to a discussion group – Keltari Apr 8 '13 at 23:59
I have the same problem, unfortunately none of the suggestions in the link are applicable. I use wireshark right now, but this is just too uncomfortable compared to Fiddler or for example Burp. In Fiddler I can see everything that goes directly from my machine to WWW, but not what is coming from the connected device. This is strange – nico gawenda Nov 14 '13 at 6:38
Does it help in Fiddler options, Connections tab, selecting "Allow remote computers to connect"? – harrymc Nov 14 '13 at 19:59
does not help :\ – nico gawenda Nov 16 '13 at 7:37

I think that the Wifi hotspot you made is secured. That is you have made either WPA2 or WPA or WEP secured Wifi hotspot.Here is a link to decrypt 802.11 encrypted packets:

How to Decrypt 802.11 packets

How ever if you don't want to do decryption then you can create an OPEN hotspot. Then try to capture packet using Wireshark.

Another technique are also available that can be used to sniff other's packet. It is called arp-poisoning.[please comment if you want more detail about it.]

Also you can set Proxy authentication in your mobile if you are using an Android phone version 4.0 or up. There is an app named DRONY which enables us to set proxy authorization in android phones.

share|improve this answer
Since he has the wifi password to decrypt the contents (and thus see them), why would he need to change the wifi to unsecured? – Pacerier Jun 9 '15 at 7:25

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .