嗅探 Flex 应用程序和 ColdFusion 后端之间的流量
在 Flex 应用程序和 ColdFusion 服务器上运行的基于 ColdFusion 的后端之间嗅探/跟踪函数调用的好策略是什么？ 我知道他们使用 AMF 协议。
我习惯使用 Fiddler 来嗅探 HTTP 客户端和服务器之间的事务，只要它工作得很好因为您使用的是纯文本或 XML HTTP 请求和响应（包括通过 SSL 的请求和响应），但它对于二进制协议（如 AMF over HTTP）没有太大帮助。
就我而言，我确实可以访问客户端和服务器的源代码，但我正在寻找一种简单的方法来被动嗅探任何 Flex + ColdFusion 情况下的流量，而无需进行任何调整在服务器上。
What is a good strategy for sniffing/tracing function calls between a Flex application and a ColdFusion-based backend running on ColdFusion server? I understand they use AMF protocol.
I'm used to using Fiddler to sniff transactions between HTTP clients and servers, and it works great as long as you're using plain text or XML HTTP requests and responses (including those over SSL) but it isn't much help for binary protocols like AMF over HTTP.
In my case, I do have access to the source code for the client and server, but I'm looking for an easy way to passively sniff traffic in any Flex + ColdFusion situation, without having to tweak anything on the server.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（6）
wireshark（艺术家以前称为 Ethereal）也是如此。 您可以嗅探每个协议层，并将流量缝合在一起。
ditto for wireshark (the artist formerly known as Ethereal). you can sniff at every protocol layer, and stitch together traffic streams.
带有 Flashbug 插件的 Firebug 将显示来自 Flash 应用程序的所有已解码的 AMF 消息。 通过 HTTPS 也能很好地工作。
https://addons.mozilla.org/en-us/firefox /addon/amf-explorer/。
Firebug with the Flashbug plugin will show all decoded AMF messages both to and from a Flash app. Works well over HTTPS too.
https://addons.mozilla.org/en-us/firefox/addon/amf-explorer/.
简单而可怜的人的把戏。 创建一个 cfc 以根据需要记录对不同 cfc 和页面的调用。 将其全部转储到桌子上。 随意筛选、排序。 我过去曾这样做过，效果很好。 这就像把小鱼钩放在你想知道的任何地方。 这可能会为您提供最与应用程序相关的数据。 如果您需要示例，请告诉我。
The simple and poor man's trick. Create one cfc to log calls to the different cfc's and pages as you need. Dump it all to a table. Filter and sort at will. I have done this in the past and it has worked great. It's like putting in little fish hooks anywhere you want to know. This would likely give you the most application relevant data. If you need an example let me know.
Wireshark：嗅探将互联网粘合在一起的粘合剂
http://www.wireshark.org/
Wireshark: sniffing the glue that holds the internet together
http://www.wireshark.org/
http://www.charlesproxy.com/
虽然不是免费的，但将解码 AMF 二进制数据并允许跟踪SSL 连接也是如此。
http://www.charlesproxy.com/
Although not free, will decode AMF binary data and allows to trace SSL connections too.
ServiceCapture 是另一种选择。 如果我没记错的话，它会为您解码二进制 AMF。
http://kevinlangdon.com/serviceCapture/
ServiceCapture is another option. It decodes the binary AMF for you, if I remember correctly.
http://kevinlangdon.com/serviceCapture/