When you set a filter (via the tab), it obviously no longer displays irrelevant sessions. How do I undo this by displaying the filtered sessions once again?

Thanks.

Hi,

Want to know if there is any option to enumerate a web client requesting a HTTP session and get the maximum information about the web client, at least the following information:

1.    MAC/Hardware address of the client
2.    Computer name
3.   OS type
4.    IP address
5.   Current user logged in or users list

Fiddler will be configured to act as reverse proxy.

Thank you,
JD

Hello,
i used this guide:https://aurir.wordpress.com/2010/03/22/tutorial-getting-android-emulator-working-with-fiddler-http-proxy-tool/
to configure fiddler and the Android Emulator but does not work. The browser on the emulator only shows a "page not found" error.
I can see the request in fiddler(something like hash.org/ ) but not more. What is wrong?

Hi,

I ran FiddlerCap on a customer's machine to try to debug some timeouts between our app and a web service api. It captured 82,256 sessions, of which only 1 is of interest, but I'm not sure which one yet. I went to save the capture to a file in order to inspect in Fiddler on my machine, but when I try that it says "Unable to write traffic to file." in the status bar.

Is this because I captured too many sessions? Is there a way of saving only a subset (I know the rough time of the packet that I want to inspect)?

Cheers

Graeme

I am new to Fiddler, so i may have missed the important configs in Fiddler. 

We have a web application (htm5, js), it makes external calls to get images.  If I start the fiddler, then the application is not working.  In the Fiddler I am not able to see any pending requests or error.  

Application is working fine normal condition. 

I tried in network, vpn network still the same behavior.  (other sites like cnn.com etc are working fine with Fiddler)

Thanks,
-V

Hi: I have a Fiddler capture file.

The client sends requests to the server  twice with exactly the same URL.

The first time, the server responds  X, while  the 2nd time the server responds Y.

Since the URLs  are exactly the same, so how could I setup a AutoResponder rule to mimic this behaviour?

Is there something like hit count to indicate whether this is the 1st visit or 2nd visit?

Many thanks for the help

I've be trying to capture traffic from an website but Fiddler doesn't show any requests/responses. On the same website it shows only the part before login, but as soon as I try to capture inside the webapp it won't work.

Btw, I tried to do the same task with Firebug and it worked, but I still want to get Fiddler working

The "Hide if URL contains" option works if I enter a single keyword. However if I enter multiple keywords separated by comma or semicolon, it doesn't work. Do I have to use a script?

How do I use multiple keywords in the "Hide if URL contains" field? I separated them with  comma and semicolon and it didn't work. Do I have to use a script?

Case 1 involves TLS + client certificate authentication with both client and server using secp384 based EC certificates. In this case, when monitoring traffic via fiddler, the tunneling/handshaking as well as encrypted traffic is completely missing from fiddler (as if nothing is happening). We know there is real traffic by monitoring both client and server individually.

Case 2 involves the same client process, same server process, same server certificate but client certificate authentication is disabled. In this case all the traffic as well as the initial handshake is captured within Fiddler.

Is this a known limitation of Fiddler? If yes, how else can I capture the TLS handshake that happens in Case 1? If not, am I missing a setting inside Fiddler? I have a C:\Users\<username>\My Documents\Fiddler2\ClientCertificate.cer certificate setup too (which basically matches the same PFX in the client cert store).

Also, all three (client, server and fiddler) are running on the same machine within the same user (admin) account. The user account's certificate store has the private key of the certificate too.

PS: Originally posted at http://security.stackexchange.com/questions/72916/can-fiddler-decrypt-https-traffic-when-using-elliptic-curves-client-cert-authe/72923#72923 but it's clear it actually belongs here.