http_trace - GitLite

KO | EN

gitlite — search

#javascript #ai #typescript #llm #golang #android #deep-learning #linux #docker #windows #awesome-list #security #ios #openai

http_trace

(★ 125)

Live HTTP and WebSocket packet capture and protocol decoding

File Explorer

Download Latest Version (.zip)

.jshintrc
ansi.js
http_session.js
http_trace
package.json
README.md

# Installation Guide

1. Get the code

git clone https://github.com/mranney/http_trace

Downloads the entire project code from GitHub to your computer.

cd http_trace

Moves into the project folder you just downloaded.

2. Node.js

Easy Recommended

Prerequisites

Git Needed to download the project code from GitHub.
Node.js Node.js must be installed to use npm. The LTS version is recommended.

npm install http_trace

Downloads and installs the libraries listed in package.json.

✅ After running the command, open the address shown in the terminal (usually something like http://localhost:3000) in your browser.

Pulled directly from this repo's README.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

## examples/http_trace

This is a handy program that decodes HTTP and WebSocket traffic.  It uses `node_pcap`.  Install it with:

npm install http_trace

## Usage `http_trace [options]`

Capture options:
        -i <interface>           interface name for capture (def: first with an addr)
        -f <pcap_filter>         packet filter in pcap-filter(7) syntax (def: all TCP packets)
        -b <buffer>              size in MB to buffer between libpcap and app (def: 10)

HTTP filtering:
        Filters are OR-ed together and may be specified more than once.
        Show filters are applied first, then ignore filters.
        --method <regex>            show requests with this method
        --method-ignore <regex>     ignore requests with this method
        --host <regex>              show requests with this Host header
        --host-ignore <regex>       ignore requests with this Host header
        --url <regex>               show requests with this URL
        --url-ignore <regex>        ignore requests with this URL
        --user-agent <regex>        show requests with this UA header
        --user-agent-ignore <regex> ignore requests with this UA header

HTTP output:
        --headers                print headers of request and response (def: off)
        --bodies                 print request and response bodies, if any (def: off)
        --tcp-verbose            display TCP events (def: off)
        --no-color               disable ANSI colors (def: pretty colors on)

Examples:
        http_trace -f "tcp port 80"
           listen for TCP port 80 on the default device
        http_trace -i eth1 --method POST
           listen on eth1 for all traffic that has an HTTP POST
        http_trace --host ranney --headers
           matches ranney in Host header and prints req/res headers

## Screenshot

![http_trace screenshot](http://ranney.com/httptrace.jpg)

The TCP tracker in `node_pcap` looks for HTTP at the beginning of every TCP connection.
If found, all captured data on this connection will be fed to node's HTTP parser and events will be generated.
`http_trace` has listeners for these events and will print out some helpful information.

If a WebSocket upgrade is detected, `http_trace` will start looking for WebSocket messages on that connection.