Sniffing / Capturing All Traffic Between Apache and Weblogic on Solaris

We have an application in which an embedded device talks to weblogic through Apache. Weblogic and Apache are on the same Solaris server, and we use the weblogic module for Apache.

Communication works through http

It does not work on https, although the problem is not directly related to https (the SSL session is negotiated and everything happens back and forth). Apparently, the device handles the message differently when using https.

We would like HTTP / https requests and responses to debug this.

We can capture data between the device and the server using (for example) wirehark, but this is encrypted, so this does not help much. Wireshark (or snoop) does not see local traffic on the server between Apache and Weblogic. Note: on Linux we could do this, but not on Solaris.

In fact, we don't need Wireshark low-level packet capture - capturing the headers and body of HTTP requests and responses will be sufficient.

Does anyone know how to do this? Is there an apache way that will log all requests and responses that go through, maybe (Google showed nothing obvious). Any other creative ways to do this?

+3
source share
4 answers

I ServerFault, , , - TCP .

, :

Weblogic -> Apache

:

Weblogic -> (across network) TCP Proxy -> (across network) -> Apache

, , tcpdump/wiresharking. rinetd, , , , Linux, inetd ( ).

: , - TcpProxy - (, inetd) . Netcat TCP Proxy. - , DTrace loopback, .

+1

TCP balance.

 _           _
| |__   __ _| | __ _ _ __   ___ ___
| '_ \ / _` | |/ _` | '_ \ / __/ _ \
| |_) | (_| | | (_| | | | | (_|  __/
|_.__/ \__,_|_|\__,_|_| |_|\___\___|
  this is balance 3.42
  Copyright (c) 2000-2007,2008
  by Inlab Software GmbH, Gruenwald, Germany.
  All rights reserved.

tcp, -p- , . ASCII ASCII hex. root > 1024.

+1

truss , .

0

Source: https://habr.com/ru/post/1716781/


All Articles