views:

1234

answers:

3

I am debugging a session mismatch problem in a web application. There are several servers involved, and the user is passed between them while holding session tokens and cookies.

The coordinating point is the browser. I want to know in detail what actions the browser is taking, basically a client equivalent to the server log. It would be useful to know the details of the HTTP request including what headers were sent, the details of the response, and any actions the browser takes to affect the request or as a result of the response (for example, acting on a redirect).

All of the source code for the various server components is not available to me, so I cannot examine the source for clues to how the session tokens are handled. The proof is in the pudding: the browser's observed behavior would be unquestionable answer.

Because the servers involved all use SSL connections, I am afraid I cannot trace this at a packet dump level.

How can I instrument the browser (preferably IE) to log this level of request and response detail?

A: 
  • Use HttpWatch Pro tool. It can save logs into file. And later on a user can send this log file to admin for analysis for example. It also can compare these logs - you can compare one user's log with another and easily spot the problem. (BTW, Basic Edition is free and Pro edition is fully functional for 30 days)

  • Fiddler is a free alternative.

Koistya Navin
Ouch, $395. Free solutions preferred as I don't have spending authority at this time.
Joe Koberg
There is also a free version.
Koistya Navin
+2  A: 

Fiddler is another option

Chris Lively
A: 
Dinesh Manne