How To Trace Win32 Socket Calls and Requests

Question

How can I effectively trace the raw data sent to my socket server listening on a win32 machine? I want the trace to be specific to the port my server is listening on, so I can monitor only that traffic.

I want to see how the data exchange works on the wire.

Answer 1

You could use:

Microsoft Network Monitor
or
Ethereal
or
Wireshark

They all come with rich filtering capabilities so filtering on a single port / address or protocol should be quite easy.

Related:

• http://stackoverflow.com/questions/28302/free-network-monitor
• http://stackoverflow.com/questions/883163/how-to-debug-monitor-smtp-communications

Answer 2

ETW can do it. ETW is built in to windows you don't need external tools. Here is blog post on that from technet.