Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

I currently use Little Snitch to control network traffic on my Macbook Pro, and see what my apps are connecting to.

Unfortunately, Little Snitch only shows you the hostname that an app is connecting to. Is there a tool which will show you the full URL of the requests that apps are making? Even better if you can view the headers.

share|improve this question
add comment

4 Answers

Sounds like you need a packet sniffer.

Wireshark will log and do full disassembly on all traffic going through your network interface.

enter image description here

In other words, it will not just show you the full URLs of each request, but it will let you look inside all the packets, so you can see the headers and content too (except in SSL connections, as they are encrypted).

It works on just about every platform out there, including Macs.

share|improve this answer
    
How do you see the URLs? There's so much traffic that I can't see the URLs. –  daviesgeek Feb 15 '12 at 23:38
    
@daviesgeek - Add a filter for GET requests. That will let you just see the requests for HTTP requests. Alternatively, you can filter for whatever type of traffic you are looking for, if you're not just looking for HTTP. It should also be able to filter for DNS requests. –  Fake Name Feb 15 '12 at 23:41
    
Also, you're going to want to turn off anything else running in the background, if you can. Since wireshark shows you everything, reducing the volume of traffic you're not interested in helps tremendously. –  Fake Name Feb 15 '12 at 23:42
add comment

The most full featured way to peek into web traffic is to install and configure your system to use a web proxy.

The mitmproxy proxy (and mitmdump tool) is mature, reliable and well documented so I would start there unless you have another that meets your specific needs.

Image from mitmproxy.org/images/mitmproxy.png

share|improve this answer
add comment

HandsOff!

is very similar to Little Snitch. I've explained differences in an answer here.

The network monitor shows hostnames, but it will distinguish them if they have different IPs. Via right-click you can get the specific IP address - you don't get to see the full URL request. But the IP address is more specific anyway.

enter image description here

The developers are open to feature requests. You might see such a feature added in the future.

share|improve this answer
    
In the picture you see several entries for api.tweetdeck.com (in total it's about a dozen). Each IP has it's own entry. –  gentmatt Feb 15 '12 at 19:41
add comment

Whilst it won't give you the full URL, if you're a fan of the command line, then iftop also comes in quite handy and shows you both incoming and outgoing hosts, port numbers (names for well known ports) and cumulative totals for each - as well as live updating "graphs" on the command line :-)

enter image description here

enter image description here

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.