up vote 3 down vote favorite
1
share [g+] share [fb]

I have the application which communicate with some server. I want to know what is the IP of this server. How can I capture all the traffic from specific application and not just all the traffic like wireshrk do?

link|improve this question
What operating system are you using? How much do you know about the application? Do you know if it uses specific ports? – James Polley Dec 28 '09 at 10:41
Windows Server 2008 R2/Windows 7 I don't know anything about port numbers. It is IP (TCP/UDP) traffic. – melco-man Dec 28 '09 at 10:44
feedback

2 Answers

up vote 1 down vote

Use Wireshark. It allows you to capture all the network traffic on your computer and you can setup custom filters including to or from an IP address, port, etc.

link|improve this answer
feedback
up vote 0 down vote

On windows, TCPView should do what you need: it can show you all the TCP and UDP connections that a particular program has open.

However, I think this is only going to be helpful if the program is opening a connection and leaving it open; they're not going to show you all network traffic by a particular program. It's possible, for instance, that it makes a very brief phone-home call as it loads, but the connection is gone by the time you run TCPView.

Process Monitor may help with getting more detail, but I haven't used it so I'm not sure how much it captures about network sockets.

link|improve this answer
TCPView will only help with established connections. I need to see even unsuccessful TCP connection attempts. – melco-man Dec 28 '09 at 10:59
In that case, I'm out of ideas. Probably worth adding that to the question though. – James Polley Dec 28 '09 at 11:23
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.