vote up 1 vote down star

Hi. I have the application which communicate with some server. I want to know what is the IP of this server. How can I capture all the traffic from specific application and not just all the traffic like wireshrk do?

flag
What operating system are you using? How much do you know about the application? Do you know if it uses specific ports? – James Polley Dec 28 at 10:41
Windows Server 2008 R2/Windows 7 I don't know anything about port numbers. It is IP (TCP/UDP) traffic. – melco-man Dec 28 at 10:44

2 Answers

vote up 1 vote down

Use Wireshark. It allows you to capture all the network traffic on your computer and you can setup custom filters including to or from an IP address, port, etc.

link|flag
vote up 0 vote down

On windows, TCPView should do what you need: it can show you all the TCP and UDP connections that a particular program has open.

However, I think this is only going to be helpful if the program is opening a connection and leaving it open; they're not going to show you all network traffic by a particular program. It's possible, for instance, that it makes a very brief phone-home call as it loads, but the connection is gone by the time you run TCPView.

Process Monitor may help with getting more detail, but I haven't used it so I'm not sure how much it captures about network sockets.

link|flag
TCPView will only help with established connections. I need to see even unsuccessful TCP connection attempts. – melco-man Dec 28 at 10:59
In that case, I'm out of ideas. Probably worth adding that to the question though. – James Polley Dec 28 at 11:23

Your Answer

Get an OpenID
or
never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.