This is a migrated thread and some comments may be shown as answers.

Traffic invisible in Fiddler but visible in Wireshark

13 Answers 680 Views
Windows
This is a migrated thread and some comments may be shown as answers.
Rémy
Top achievements
Rank 1
Rémy asked on 09 Apr 2021, 07:32 AM
I am trying to do some tests on a dotnet application. However some requests are present in wireshark but not in fiddler?

13 Answers, 1 is accepted

Sort by
0
Nick Iliev
Telerik team
answered on 09 Apr 2021, 10:07 AM

Hi Remy,

 

 

Could you provide more details about the request that you are expecting to see in Fiddler? For example, are those HTTP/HTTPS requests (which Fiddler should handle out-of-the-box) or those using some other protocol?

 

Regards,
Nick Iliev
Progress Telerik

Love the Telerik and Kendo UI products and believe more people should try them? Invite a fellow developer to become a Progress customer and each of you can get a $50 Amazon gift voucher.

0
Rémy
Top achievements
Rank 1
answered on 11 Apr 2021, 01:00 PM

This 2 HTTP request are present in wireshark capture file when i import them into fiddler 4

The second image is a detail image.

 

0
Nick Iliev
Telerik team
answered on 12 Apr 2021, 06:59 AM

Hi Rerny,

Have you configured your NET services to point to the Fiddler proxy as described here?

 

Regards,
Nick Iliev
Progress Telerik

Love the Telerik and Kendo UI products and believe more people should try them? Invite a fellow developer to become a Progress customer and each of you can get a $50 Amazon gift voucher.

0
Rémy
Top achievements
Rank 1
answered on 12 Apr 2021, 11:18 AM
Yes I did change the machine.config file. I think the app is 'protected' from fiddler.
0
Nick Iliev
Telerik team
answered on 13 Apr 2021, 05:36 AM

Hello Remy,

 

The two sessions shown in the screenshot are non-secure traffic, meaning no HTTPS certificates or advanced security techniques like certificate pinning are used. Are you able to capture the exact requests when the URLs are opened manually outside the NET application? The issue still sounds like a misconfiguration issue rather than the app having specific security settings.

 

Regards,
Nick Iliev
Progress Telerik

Тhe web is about to get a bit better! 

The Progress Hack-For-Good Challenge has started. Learn how to enter and make the web a worthier place: https://progress-worthyweb.devpost.com.

0
Rémy
Top achievements
Rank 1
answered on 13 Apr 2021, 06:43 AM
I manage to access the url from edge but cannot capture the edge request in fiddler, on the other hand it works when I use postman.
0
Nick Iliev
Telerik team
answered on 13 Apr 2021, 12:24 PM

Hey Remy,

 

The latest version of Edge is Chromium-based and, by default, uses the OS proxy settings. That would mean that if Fiddler is successfully set as an OS proxy (on Windows, start Fiddler, enable capturing and check Start > Proxy Settings > Manual Proxy), then it should be able to capture all the traffic that does through MS Edge successfully. I am adding a screenshot that demonstrates that Fiddler from Edge successfully captures the test endpoint.


 

Regards,
Nick Iliev
Progress Telerik

Тhe web is about to get a bit better! 

The Progress Hack-For-Good Challenge has started. Learn how to enter and make the web a worthier place: https://progress-worthyweb.devpost.com.

0
Rémy
Top achievements
Rank 1
answered on 14 Apr 2021, 06:52 AM

Ok the edge capture works. But not on the program: https://bit.ly/3lCiCV6

 

Here is the screenshot of Edge in Fiddler.

0
Nick Iliev
Telerik team
answered on 15 Apr 2021, 08:47 AM

Hello Remy,

 

Having confirmed that Fiddler can capture the endpoint via a browser means that the issue is most likely within the configuration and/or the security tooling used within your .NET application. It is hard to pinpoint what might be going on without having the actual NET application so I would suggest to re-check the NET configuration for using the Fiddler proxy (and if needed for using the Fiddler root certificate for HTTPS capturing).

As a side note, the bit.ly link you shared is marked as potentially harmful so I am not able to open it due to our corporate security policy.

 

Regards,
Nick Iliev
Progress Telerik

Love the Telerik and Kendo UI products and believe more people should try them? Invite a fellow developer to become a Progress customer and each of you can get a $50 Amazon gift voucher.

0
sum1saw
Top achievements
Rank 1
answered on 17 Apr 2021, 11:07 AM

Hi Nick,

Same happens with me when I'm trying fiddler Http request aren't captured whereas on SMSniff or Wireshark its capturing perfectly fine.

PF Snapshot via smsniff

0
Rosen Vladimirov
Telerik team
answered on 21 Apr 2021, 08:28 AM

Hello,

Thank you for the additional information. I do not have experience with SMSniff, but from what I've read, I think both SMSniff and Wireshark work on a different level of capturing the traffic. Fiddler Classic works as a proxy tool, so it is required for the requests' sender to respect the proxy configuration in order to see them in the tool. As far as I get it, both SMSniff and Wireshark work on the network adapter itself, no matter what is the proxy configuration and who respects it. 
In order to determine if your requests respect the Fiddler Classic's proxy, you can try stopping the Fiddler Classic application and manually set your OS proxy settings to point to the Fiddler address: http=127.0.0.1:8888;https=127.0.0.1:8888 (which would not be available at that time). In this case, you will not have internet access. So you can check if your application works at this time. If it does, it means the traffic does not go through the proxy and you need to adjust the configuration and the sending of requests in your code.

Hope this helps!

Regards,
Rosen Vladimirov
Progress Telerik

Virtual Classroom, the free self-paced technical training that gets you up to speed with Telerik and Kendo UI products quickly just got a fresh new look + new and improved content including a brand new Blazor course! Check it out at https://learn.telerik.com/.

0
sum1saw
Top achievements
Rank 1
answered on 25 Apr 2021, 09:18 AM

Hi Rosen,

Thanks for the reply, as you suggested I researched and found that the application doesn't support proxy setting in its request. Also if I point windows proxy towards localhost application wouldn't run as it send a heartbeat check for internet connection and if connection not found nothing can be done further.

Do you have any other suggestion.

Rosen Vladimirov
Telerik team
commented on 28 Apr 2021, 02:55 PM

Hey,

In this case I would suggest to contact the authors of the application and ask them how to configure it in a way to respect the system proxy. 

Hope this helps.

Regards,
Rosen 
0
Anna
Top achievements
Rank 1
Iron
answered on 27 May 2021, 03:53 AM
So how can I set the default to always auto-advanced, can i do it with an impostor simulator, if not is there any way to fix this
Nick Iliev
Telerik team
commented on 27 May 2021, 07:12 AM

Hey Anna,

 

Could you elaborate more about what you mean by "set the default to auto-advanced" and an "impostor simulator" in the context of the discussed Fiddler issue? If you are experiencing another issue with Fiddler Classic, you could start a new thread with a detailed explanation of the problem you are facing.

Tags
Windows
Asked by
Rémy
Top achievements
Rank 1
Answers by
Nick Iliev
Telerik team
Rémy
Top achievements
Rank 1
sum1saw
Top achievements
Rank 1
Rosen Vladimirov
Telerik team
Anna
Top achievements
Rank 1
Iron
Share this question
or