4

SocketSniff allows you to watch the Windows Sockets (WinSock) activity of the selected process. On x64 version of Windows, SocketSniff can only work with 32-bit programs.

Is there any SocketSniff equivalent that works for 64-bit processes ? I prefer it to WireShark because it filters per process, and it intercepts the messages before they even get to the socket (or at least, as they are getting to it)

Improve this question
1
  • Have you found it? if so, share. I think WireShark is ever-green answer?
    – T.Todua
    Commented Apr 26, 2018 at 18:34

1 Answer 1

Reset to default
1

You can use Winsock Tracing to capture data. It's system-wide, but lets you see very fine-grained activity. It's labour-intensive and inconvenient to use though.

Sadly, Microsoft Message Analyzer is dead, as is Microsoft Network Monitor. The former would've been ideal for your needs.

What you probably really need is a Wireshark input method that uses the Windows Filtering Platform for capture. I'm not aware of any at this time; WinPCap uses the NDIS intermediate driver API, which has a different set of pros and cons.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .