SocketSniff allows you to watch the Windows Sockets (WinSock) activity of the selected process. On x64 version of Windows, SocketSniff can only work with 32-bit programs.

Is there any SocketSniff equivalent that works for 64-bit processes ? I prefer it to WireShark because it filters per process, and it intercepts the messages before they even get to the socket (or at least, as they are getting to it)

  • Have you found it? if so, share. I think WireShark is ever-green answer?
    – T.Todua
    Apr 26 '18 at 18:34

You can use Winsock Tracing to capture data. It's system-wide, but lets you see very fine-grained activity. It's labour-intensive and inconvenient to use though.

Sadly, Microsoft Message Analyzer is dead, as is Microsoft Network Monitor. The former would've been ideal for your needs.

What you probably really need is a Wireshark input method that uses the Windows Filtering Platform for capture. I'm not aware of any at this time; WinPCap uses the NDIS intermediate driver API, which has a different set of pros and cons.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.