Working With Live Http Traffic

HTTPView is a general purpose HTTP traffic analyzer tool, which operates much like the standard HTTP monitoring/intercepting proxies but without the need to do any proxing. In other words, you do not have to configure any proxy settings, deal with SSL issues or non-standardized authentication protocols and other problems and nuisances very common to HTTP proxies.

Step 1

Open HTTPView from the Launch screen or by directly typing the application URL.

Screenshot 01

Step 2

The tool has already began recording data from your browser.

Screenshot 02

As you navigate through the captured HTTP transactions both the request and response screens will be populated with the HTTP request and response data collected by HttpView.

HTTPView supports various coloring schemes to highlight the important requests from the unimportant ones. For example, image requests are displayed differently from other requests. This is done so that you can get an automatic visual indication without the need to read the actual HTTP request and response, content type information and other meta data.

Step 3

Captured requests can be used as input to other tools such as Resend and Retest. All these features are available from the application toolbar.

Screenshot 03

Step 4

HTTPView captures all requests by default. However often you may need to reduce the information displayed on the screen. This is done via the Scope screen.

Screenshot 04

If you are familiar with the Scope screen from the Scanner you already know how it works. The Scope is divided into three sections: the exclude and include text areas and the test text area. Both exclude and include text areas except regular expressions as input. The test textarea accepts URLs as input and it is primarily used to test the versatility of the Scope rules.