I'm running Windows Vista home premium. I want to see all outgoing HTTP requests from my PC along with the URL. Is there any free tool for this?

  • The first answer below from @Mikey is correct, if your need for "http requests" is accurate. Do you want to see the content of each request, or do you just want to monitor web usage? – Paul Nov 14 '11 at 7:36
  • Request URL is enough but response content is better to have. – Moe Sweet Nov 14 '11 at 7:41
  • 1
    Cool, then the answer given is good to go. – Paul Nov 14 '11 at 9:22
  • Related on Stack Overflow: What HTTP traffic monitor would you recommend for Windows? – Stevoisiak Jun 19 '18 at 14:31

You can use http://www.wireshark.org/

The user guide can be found at http://www.wireshark.org/docs/wsug_html/

To filter http traffic specifically you can refer to; https://serverfault.com/questions/96272/how-to-filter-http-traffic-in-wireshark


Fiddler is specialized in HTTP(S) packet monitoring, manipluation and generation, so it provides such features as requested in the question in an easier way. However, Wireshark is much more comprehensive in terms of network protocol monitoring and analysis.


You could use the command prompt by typing the command netstat /f. This will show you a list of the connections to your local interface. The /f tells the command to resolve the external ip addresses as well.

  • 1
    This shows you active connections, not http requests – Sinaesthetic Oct 30 '13 at 3:37

There is a detailed article on this topic at Hubpages. It describes a solution to easily log and filter HTTP requests made in a home LAN based on Wireshark and some supplemental free software.

In a nutshell, the article deals with the problem of memory overgrowth that prevents using Wireshark for continuous HTTP requests monitoring. To address the issue, the author suggests using tshark.exe (the commandline version of Wireshark) periodically killing and restarting it with System Scheduler and a batch file like this:

    FOR /F "usebackq tokens=2" %%i IN (`tasklist ^| findstr /r /b "tshark.exe"`) DO start /MIN sendsignal.exe %%i
    ping -n 7 -w 1000
    tshark -2 -l -t ad -R "http.request.method == GET" -N nC -i 2 | ts_rdln.exe

where sendsignal.exe is a utility to send Ctrl+C to a program; ts_rdln.exe is a simple tshark log parser/filterer; ping command is used to introduce a delay; and the i argument of the last line is the number of your NIC looking out into the Internet.

  • 1
    When linking to a site it is best to summarise the information on the page. Otherwise if the link goes down your answer is useless. – Joe Taylor Oct 7 '13 at 8:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.