You may always use Wireshark (or tshark.exe from the command line) to capture data and then post-process them afterwards without considering the headers.
If you need to capture packets on the local machine (loopback device), you should use the excellent RawCap tool to capture a pcap file, then use Wireshark on the captured file as usual.
也就是说,它是 tcpflow,为 Windows 编译的。我还没有尝试过,但我认为它有效。它是一个“zipball”,因此您需要一些可以从 Zip 存档中提取的软件。
Here is a tool for Windows that's about as much like tcpflow as possible. :-)
I.e., it IS tcpflow, compiled for Windows. I haven't tried it, but I assume it works. It's a "zipball", so you'll need some software that can extract from a Zip archive.
发布评论
评论(2)
您可以始终使用 Wireshark(或命令行中的 tshark.exe)来捕获数据,然后对它们进行后处理,而不考虑标头。
示例输出:
更新:
如果您需要在本地计算机(环回设备)上捕获数据包,您应该使用优秀的
RawCap
工具捕获pcap文件,然后使用Wireshark像往常一样在捕获的文件上。You may always use Wireshark (or tshark.exe from the command line) to capture data and then post-process them afterwards without considering the headers.
Sample output:
Update:
If you need to capture packets on the local machine (loopback device), you should use the excellent
RawCap
tool to capture a pcap file, then use Wireshark on the captured file as usual.这里是一个适用于 Windows 的工具,与tcpflow 尽可能。 :-)
也就是说,它是 tcpflow,为 Windows 编译的。我还没有尝试过,但我认为它有效。它是一个“zipball”,因此您需要一些可以从 Zip 存档中提取的软件。
Here is a tool for Windows that's about as much like tcpflow as possible. :-)
I.e., it IS tcpflow, compiled for Windows. I haven't tried it, but I assume it works. It's a "zipball", so you'll need some software that can extract from a Zip archive.