50

I'm running Windows Vista home premium. I want to see all outgoing HTTP requests from my PC along with the URL. Is there any free tool for this?

4
  • The first answer below from @Mikey is correct, if your need for "http requests" is accurate. Do you want to see the content of each request, or do you just want to monitor web usage?
    – Paul
    Nov 14, 2011 at 7:36
  • Request URL is enough but response content is better to have.
    – Moe Sweet
    Nov 14, 2011 at 7:41
  • 1
    Cool, then the answer given is good to go.
    – Paul
    Nov 14, 2011 at 9:22
  • Related on Stack Overflow: What HTTP traffic monitor would you recommend for Windows?
    – Stevoisiak
    Jun 19, 2018 at 14:31

4 Answers 4

29

You can use http://www.wireshark.org/

The user guide can be found at http://www.wireshark.org/docs/wsug_html/

To filter http traffic specifically you can refer to; https://serverfault.com/questions/96272/how-to-filter-http-traffic-in-wireshark

0
20

Fiddler is specialized in HTTP(S) packet monitoring, manipluation and generation, so it provides such features as requested in the question in an easier way. However, Wireshark is much more comprehensive in terms of network protocol monitoring and analysis.

5

You could use the command prompt by typing the command netstat /f. This will show you a list of the connections to your local interface. The /f tells the command to resolve the external ip addresses as well.

1
  • 4
    This shows you active connections, not http requests Oct 30, 2013 at 3:37
3

There is a detailed article on this topic at Hubpages. It describes a solution to easily log and filter HTTP requests made in a home LAN based on Wireshark and some supplemental free software.

In a nutshell, the article deals with the problem of memory overgrowth that prevents using Wireshark for continuous HTTP requests monitoring. To address the issue, the author suggests using tshark.exe (the commandline version of Wireshark) periodically killing and restarting it with System Scheduler and a batch file like this:

    FOR /F "usebackq tokens=2" %%i IN (`tasklist ^| findstr /r /b "tshark.exe"`) DO start /MIN sendsignal.exe %%i
    ping 127.0.0.1 -n 7 -w 1000
    tshark -2 -l -t ad -R "http.request.method == GET" -N nC -i 2 | ts_rdln.exe

where sendsignal.exe is a utility to send Ctrl+C to a program; ts_rdln.exe is a simple tshark log parser/filterer; ping command is used to introduce a delay; and the i argument of the last line is the number of your NIC looking out into the Internet.

1
  • 3
    When linking to a site it is best to summarise the information on the page. Otherwise if the link goes down your answer is useless.
    – Joe Taylor
    Oct 7, 2013 at 8:42

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .