Hi,

I ran FiddlerCap on a customer's machine to try to debug some timeouts between our app and a web service api. It captured 82,256 sessions, of which only 1 is of interest, but I'm not sure which one yet. I went to save the capture to a file in order to inspect in Fiddler on my machine, but when I try that it says "Unable to write traffic to file." in the status bar.

Is this because I captured too many sessions? Is there a way of saving only a subset (I know the rough time of the packet that I want to inspect)?

Cheers

Graeme

I am new to Fiddler, so i may have missed the important configs in Fiddler. 

We have a web application (htm5, js), it makes external calls to get images.  If I start the fiddler, then the application is not working.  In the Fiddler I am not able to see any pending requests or error.  

Application is working fine normal condition. 

I tried in network, vpn network still the same behavior.  (other sites like cnn.com etc are working fine with Fiddler)

Thanks,
-V

Hi: I have a Fiddler capture file.

The client sends requests to the server  twice with exactly the same URL.

The first time, the server responds  X, while  the 2nd time the server responds Y.

Since the URLs  are exactly the same, so how could I setup a AutoResponder rule to mimic this behaviour?

Is there something like hit count to indicate whether this is the 1st visit or 2nd visit?

Many thanks for the help

I've be trying to capture traffic from an website but Fiddler doesn't show any requests/responses. On the same website it shows only the part before login, but as soon as I try to capture inside the webapp it won't work.

Btw, I tried to do the same task with Firebug and it worked, but I still want to get Fiddler working

The "Hide if URL contains" option works if I enter a single keyword. However if I enter multiple keywords separated by comma or semicolon, it doesn't work. Do I have to use a script?

How do I use multiple keywords in the "Hide if URL contains" field? I separated them with  comma and semicolon and it didn't work. Do I have to use a script?

Case 1 involves TLS + client certificate authentication with both client and server using secp384 based EC certificates. In this case, when monitoring traffic via fiddler, the tunneling/handshaking as well as encrypted traffic is completely missing from fiddler (as if nothing is happening). We know there is real traffic by monitoring both client and server individually.

Case 2 involves the same client process, same server process, same server certificate but client certificate authentication is disabled. In this case all the traffic as well as the initial handshake is captured within Fiddler.

Is this a known limitation of Fiddler? If yes, how else can I capture the TLS handshake that happens in Case 1? If not, am I missing a setting inside Fiddler? I have a C:\Users\<username>\My Documents\Fiddler2\ClientCertificate.cer certificate setup too (which basically matches the same PFX in the client cert store).

Also, all three (client, server and fiddler) are running on the same machine within the same user (admin) account. The user account's certificate store has the private key of the certificate too.

PS: Originally posted at http://security.stackexchange.com/questions/72916/can-fiddler-decrypt-https-traffic-when-using-elliptic-curves-client-cert-authe/72923#72923 but it's clear it actually belongs here.

Good day,
is it possible to achieve the following using Fiddler: intercept a request via http proxy, and forward the request to the same address, just changing proxy type from http to socks5? This way I want to add socks5 support to some software, which only supports http(s) proxies. Thanks.

Hi Guys, please a have a guest about get https trafic from my tablet.

Well, I'm trying to get traffic to my instagram from my tablet.
but when I login to my account on instagram from my tablet the only thing I see in fiddler is as follows:

Encrypted HTTPS traffic flows through this CONNECT tunnel. HTTPS Decryption is enabled in Fiddler, so decrypted sessions running in this tunnel will be shown in the Web Sessions list.

Secure Protocol: Tls
Cipher: Aes128 128bits
Hash Algorithm: Sha1 160bits
Key Exchange: ECDHE_RSA (0xae06) 256bits

== Server Certificate ==========
[Subject]
  CN=*.instagram.com, O=Instagram LLC, L=Menlo Park, S=CA, C=US

[Issuer]
  CN=DigiCert High Assurance CA-3, OU=www.digicert.com, O=DigiCert Inc, C=US

[Serial Number]
  083A41637D0A7B6BCDDCD978CB5495D0

[Not Before]
  28/02/2014 21:00:00

[Not After]
  30/04/2015 09:00:00

[Thumbprint]
  50920CCB549CE4D2EE4F5FBCDEBADC68887319E0

Why can not I see traffic ?

Thanks
Alexandre
Brazil

Hi,

Fiddler is not able to launch some JSP pages if we Query String (GET parameters or URL Parameters) length is more, same JSP opens fine if we cut some parameters, is there a restriction in Fiddler which is blocking URL's if URL parameters length is more? How to rectify this error?

Thanks in advance.
Mahesh