Http traffic capture 1.2.0

HTTP Traffic Capture is a comprehensive HTTP & HTTPS packet capture tool designed for users who possess network analysis capabilities. This lightweight software offers a range of features to facilitate efficient traffic analysis.

Key Features:

1. Supports analysis of both HTTP and HTTPS traffic
2. Enables preview and viewing of various file types such as HTML, JavaScript, CSS, images (webp, jpeg, png), and binary data
3. Allows customization of packet capture rules
4. Provides access to historical packet capture records
5. Offers filtering options for evaluating historical packet content
6. Enables exporting of captured packet content

Instructions:

1. Default support for capturing HTTP packets; for capturing and parsing HTTPS traffic, a certificate installation is required.
2. To initiate the packet capture process, click on the start button. The system will create and establish a VPN connection. Packet capture cannot be performed if the VPN configuration is rejected.
3. To view the current session, click on the orange task bar. By clicking on a specific session, you can access the session request and response.
4. To export the corresponding values, select the request line or response line within the session.
5. The filter button allows filtering of content specific to a domain name.
6. Use the export button to export session content.
7. Clicking on the stop button generates a history record for future reference.
8. In order to clear all data, navigate to the settings page and click on the clear all data button.

Software Operation:

Upon starting the packet capture, the software establishes a VPN connection and directs the VPN data packets to a local HTTP proxy server. Data packets are then analyzed and stored within the local proxy server. For parsing HTTPS data, installing and trusting the certificate is necessary.

Data Security:

Given the sensitive nature of user privacy data involved in packet capture software, ensuring privacy protection is of utmost importance. To address this concern, the software implements the following mechanisms:

1. The software dynamically and randomly generates CA keys and certificates, securely storing them within the sandbox. The user's CA private key remains unknown to any party.
2. Certificates are strictly bound to individual users and cannot be shared among different users.
3. Reinstalling the application renders history certificates invalid. Users can delete certificates manually in the settings.
4. Certificates have a validity period of one year. Upon expiration, users must regenerate them for continued usage.
5. The software exclusively stores captured HTTP data locally and does not upload it to any external sources.
6. The software prevents users from modifying network requests to deter improper actions.

System Configuration Instructions:

HTTP proxy server: 127.0.0.1:9080
Certificate description file name: Traffic Capture YYYY-MM-dd HH:mm (where YYYY-MM-dd HH:mm represents the time of certificate generation)
VPN description file name: "Traffic Capture"