Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I use TCPlogView to see all tcp activity of a software. for example:

An app (sample.exe) downloads this file in background: google.com/dl/sample.txt

when I track it with a TCP software I see this:

local:192.168.1.2  hostname:google.com

But it doesn't show the full address. (google.com/dl/sample.txt) and it only shows me the host name. (google.com)

So is there any software to track FULL netwrok activity of an application with all details?

share|improve this question

2 Answers 2

up vote 2 down vote accepted

At the TCP level, the only addressing that you can see is the IP address and TCP port number of each end of the connection. TCPLogView is doing exactly what it is designed to do. Other protocols ride inside a TCP connection to provide services like web browsing (HTTP), file transfer (FTP), and mail transfer (SMTP). If you wish to capture what the various protocols that ride inside TCP datagrams are doing, you'll need a program that understands how to interpret that particular protocol.

There are also other transport layer protocols, like UDP, which can be used to send data over the network. If you want to know the full network activity of an application, you'll need to consider more than just TCP activity. Without knowing more about what you want to accomplish, it is hard to suggest an appropriate tool.

For HTTP, which I'm guessing is what you want based on the question, Wireshark and Fiddler are pretty good. Wireshark is the more general of the two tools.

share|improve this answer

TcpLogView is the same as CurrPorts and TCPView; they only show you the current state of the network interface(s) on the system. That is, they only list the current connections’ endpoints, protocols, and status.

To see transient information like URLs and file content, you need to use a packet sniffer for that. There are several to choose from, but many are too powerful and difficult to learn quickly. A good one to start with (and often, continue with) is SmartSniff. It is very easy to configure and use, has capture and display filters, and provides all the information you want.

Screenshoft of Nirsoft SmartSniff

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.