0

I need to capture all the traffic, specially during login, between nimbuzz pc client and nimbuzz server. The reason is that i need to debug outgoing packets at login that mark the user visibility status in order to reproduce them in a in-house XMPP client application

I've tried doing this with wireshark, but i seem to be pretty helpless with this tool. Also, the packets i've been able to see are all before the SASL negotiation happens, after that, i cannot see the xml packets being exchanged

any help for how to achieve this task is greatly appreciated (preferably on Windows, since there is no nimbuzz client for linux, in any case i can install one in a VM and monitor the traffic between the VM instance in the linux host)

Edit i've added a follow up question here.

lurscher
  • 162
  • 1
  • 3
  • 17

2 Answers2

1

From a UI perspective, I believe you might want to give Microsoft's Network Monitor a try. However, packet capture utilities are by nature complex beasties, so there's no getting around the fact that you'll need to become proficient with one. Especially if you're making software based on replicating what you see and understand from network traffic.

NetMon can arrange traffic based on the process that is generating it (as I'm sure Wireshark can, as well). You might have an easier time with NetMon though. I suggest reading "How to capture network traffic with Network Monitor" to start with. Then "Analyzing Network Data with Network Monitor." Finally, "Network Monitoring with Network Monitor 3.4" is an up to date series that should round out your beginner's education in the matter.

Wesley
  • 32,320
  • 9
  • 80
  • 116
  • thanks Wesley for the suggestion, i'm liking the NetMon ui a lot better than WS, i've added a followup question at http://serverfault.com/q/379331/75759. Please have a look if you have time. Thank you! – lurscher Apr 13 '12 at 21:32
0

You can capture all traffic either on your server or on your client and then filter them based on the appropriate ports.

For a discussion about XMPP ports, you can see this post.

Khaled
  • 35,688
  • 8
  • 69
  • 98