#SPSBE




How to fiddler with
 SharePoint 2010
        #SPSBE23



     Penny Coventry
ABOUT ME
•   Independent Consultant
•   Author/Co-author 10 SharePoint Books
•   Trainer
•   Worked with SharePoint since 2001
•   Based in UK, work Europe & US
•   Microsoft MVP SharePoint Server

• Blogs/Web Site
     • http://www.sharepointdesignerstepbystep.com/
• Twitter: @pjcov
A big thanks to our sponsors

Platinum Sponsors




Gold Premium Sponsors          Venue Sponsor




Gold Sponsors
CONTENT
• What is it and how does it Work?
• Getting to Know Fiddler
• Traffic Import
• Summary
• Resources
WHAT IS FIDDLER?
  IT’S JUST ONE OF THE TOOLS OF YOUR TRADE
• Developer                         • Log analysis
    • SPMonitoredScope
                                       • SPDiag
    • Developer Dashboard
    • Fx Cop (.NET Code Analysis)      • ULSViewer
    • SP Dispose Check                 • Performance Analyzer Logs
    • IE Dev Toolbar                     (PAL)
• Profiling                            • IIS Log Parser
    • Perfmon                       • Http roundtrip analysis
    • SQL Profiler
                                       • Fiddler
    • Win DBG
                                       • Netmon 3.4
    • SQLIO Disk Subsystem
      Benchmark Tool
BUT REALLY – WHAT IS IT?
• It’s Free
• First Released October 2003
• Developed by one man:
  Microsoft employee: Eric Lawrence
WHAT DOES IT DO?
• Capture and view all HTTP and HTTPS
• “Fiddle” with incoming and outgoing data
  • Modifies Page Requests and Responses
  • Manipulates timing
  • Decrypts HTTPS traffic
WHO USES FIDDLER?
• Microsoft engineers
• Support teams
• Lots of external web developers
  (10K+ downloads per week)
• Security researchers
• SharePoint Admins
• …

• Some bad guys 
HOW DOES FIDDLER WORK?
                                                  Firewall
    Firefox


  CryptoAPI         WinHTTP


   Internet                             Company
                    WinINET   Fiddler                        http://internet
   Explorer                              Proxy


     Office


     SPD
     2010

Source: Microsoft
DEMO



  Getting to Know Fiddler
  • A Quick Tour of Fiddler
SESSION ICONS
FILTERING HTTP TRAFFIC
• Application Type Filter - Toggle
• QuickExec box
• Process Filter
• Filters tab
• Find Sessions
• Rules
QUICKEXEC BOX
• Type commands:
    • Cls
    • ?sometext
    • >40000
    • =301
    • =POST
    http://www.fiddler2.com/fiddler/help/quickexec.asp
• Write Your Own – FiddlerScript
• neXpert Performance Tool
    • Adds commands
    • Generates HTML recommendations report
HELP WITH SHAREPOINT CAPTURES
• Kerberos
  www.microsoft.com
  /download/en/
  details.aspx?id=23176
INFOPATH
• Darvish Shadravan:
  blogs.msdn.com/b/shivajin/archive/2009/05/11/deep-dive-
  on-infopath-request-and-response.aspx
  ipfswebtest.codeplex.com/
Demo



  Filters
DEBUGGING NON-WINDOWS CLIENTS
        PC


       MAC


      Linux         Fiddler       http://internet



       iPad


     Windows
      Phone



Source: Microsoft
WHAT ABOUT FIREFOX?
• Used to be a problem
   • Reconfigure proxy settings every time you start and
     stop Fiddler
   • FiddlerHook pluggin for Firefox 3+
• Firefox proxy settings to
   • Use system proxy
   • Behaves like IE
DEMO



  Remote Clients
EXPORT / IMPORT
•   Import web traffic from other tools
     •   HTTP Archive JSON (.har)
     •   HTTP Archive XML (exported from IE9 Developer Tools Network Tab)
•   Export formats
     •   Session Archive ZIP (SAZ)
     •   HTTP Archive JSON v1.1
     •   HTTP Archive JSON v1.2
     •   Visual Studio Web Test XML
     •   WCAT Load Test Script
     •   Raw Files
     •   Meddler Scripts (added in v2.3.5)
     •   HTML5 AppCache Manifests (added in v2.3.6)
•   IE 9 -> Developer Tools -> Network tab
     blogs.msdn.com/b/ie/archive/2010/04/22/ie9-developer-tools-network-tab.aspx
     msdn.microsoft.com/en-us/library/gg130952(v=VS.85).aspx
SAZ FILES
• Specially formatted .zip files
• Stores HTTP(S) traffic for later use
    • File -> Save
    • QuickExec box: dump or Savesaz filename
    • nExpert tab: Save Sessions w Report to Zip
    • File -> Load Archive
• Can be Password-protected/Encrypted File -> Fiddler Options -> General
• FiddlerCap
    • Used to troubleshoot website problems
    • Lightweight version of Fiddler
    • Non-technical user creates SAZ file
    • Sends to Expert for Analysis
Demo



  Traffic Export / Import
Fiddler application with           Your application hosting
                       extensions                         FiddlerCore
                           Fiddler 2
                          Inspector2
                          Inspector2
ExecAction.exe




                       IFiddlerExtension
                                                            YourApp.exe
                       IFiddlerExtension
                      Fiddler ScriptEngine
                       Your FiddlerScript
                          FiddlerCore                        FiddlerCore


                   Xceed*.dll        Makecert.exe    Xceed*.dll   Makecert.exe


                                Source: Microsoft
SUMMARY
• HTTP/HTTPS Debugger
• More than just traffic capture
• Runs as Proxy Server:
   • Local Machine
   • Remote Server
• Written in C#
• Free: www.fiddler2.com
RESOURCES
•    MSDN blogs:
      •   blogs.msdn.com/b/fiddler/
      •   blogs.msdn.com/b/nexpert/
•    Discussion group: groups.google.com/group/httpfiddler
•    Twitter tag: #fiddler2
•    Facebook: www.facebook.com/pages/Fiddler-Web-Debugger/214143918785
•    Fiddler Book Table of Contents: https://groups.google.com/forum/m/#!topic/httpfiddler/0CKFAKYe88E
•    Google groups forum: https://groups.google.com/forum/m/#!forum/httpfiddler
•    Other Useful links:
      •   stackoverflow.com/questions/tagged/fiddler
      •   serverfault.com/search?q=fiddler
      •   www.eggheadcafe.com/searchform.aspx?search=fiddler
•    HAR file to Page Speed
      •   www.stevesouders.com/blog/2010/05/01/har-to-page-speed/
      •   stevesouders.com/flint/
•    neXpert Performance Analysis Plugin www.microsoft.com/download/en/search.aspx?q=nexpert
We need your feedback!

               Scan this QR code or visit
               http://svy.mk/sps2012be


               Our sponsors:

Penny coventry fiddler-spsbe23

  • 1.
    #SPSBE How to fiddlerwith SharePoint 2010 #SPSBE23 Penny Coventry
  • 2.
    ABOUT ME • Independent Consultant • Author/Co-author 10 SharePoint Books • Trainer • Worked with SharePoint since 2001 • Based in UK, work Europe & US • Microsoft MVP SharePoint Server • Blogs/Web Site • http://www.sharepointdesignerstepbystep.com/ • Twitter: @pjcov
  • 3.
    A big thanksto our sponsors Platinum Sponsors Gold Premium Sponsors Venue Sponsor Gold Sponsors
  • 4.
    CONTENT • What isit and how does it Work? • Getting to Know Fiddler • Traffic Import • Summary • Resources
  • 5.
    WHAT IS FIDDLER? IT’S JUST ONE OF THE TOOLS OF YOUR TRADE • Developer • Log analysis • SPMonitoredScope • SPDiag • Developer Dashboard • Fx Cop (.NET Code Analysis) • ULSViewer • SP Dispose Check • Performance Analyzer Logs • IE Dev Toolbar (PAL) • Profiling • IIS Log Parser • Perfmon • Http roundtrip analysis • SQL Profiler • Fiddler • Win DBG • Netmon 3.4 • SQLIO Disk Subsystem Benchmark Tool
  • 6.
    BUT REALLY –WHAT IS IT? • It’s Free • First Released October 2003 • Developed by one man: Microsoft employee: Eric Lawrence
  • 7.
    WHAT DOES ITDO? • Capture and view all HTTP and HTTPS • “Fiddle” with incoming and outgoing data • Modifies Page Requests and Responses • Manipulates timing • Decrypts HTTPS traffic
  • 8.
    WHO USES FIDDLER? •Microsoft engineers • Support teams • Lots of external web developers (10K+ downloads per week) • Security researchers • SharePoint Admins • … • Some bad guys 
  • 9.
    HOW DOES FIDDLERWORK? Firewall Firefox CryptoAPI WinHTTP Internet Company WinINET Fiddler http://internet Explorer Proxy Office SPD 2010 Source: Microsoft
  • 10.
    DEMO Gettingto Know Fiddler • A Quick Tour of Fiddler
  • 11.
  • 12.
    FILTERING HTTP TRAFFIC •Application Type Filter - Toggle • QuickExec box • Process Filter • Filters tab • Find Sessions • Rules
  • 13.
    QUICKEXEC BOX • Typecommands: • Cls • ?sometext • >40000 • =301 • =POST http://www.fiddler2.com/fiddler/help/quickexec.asp • Write Your Own – FiddlerScript • neXpert Performance Tool • Adds commands • Generates HTML recommendations report
  • 14.
    HELP WITH SHAREPOINTCAPTURES • Kerberos www.microsoft.com /download/en/ details.aspx?id=23176
  • 15.
    INFOPATH • Darvish Shadravan: blogs.msdn.com/b/shivajin/archive/2009/05/11/deep-dive- on-infopath-request-and-response.aspx ipfswebtest.codeplex.com/
  • 16.
  • 17.
    DEBUGGING NON-WINDOWS CLIENTS PC MAC Linux Fiddler http://internet iPad Windows Phone Source: Microsoft
  • 18.
    WHAT ABOUT FIREFOX? •Used to be a problem • Reconfigure proxy settings every time you start and stop Fiddler • FiddlerHook pluggin for Firefox 3+ • Firefox proxy settings to • Use system proxy • Behaves like IE
  • 19.
    DEMO RemoteClients
  • 20.
    EXPORT / IMPORT • Import web traffic from other tools • HTTP Archive JSON (.har) • HTTP Archive XML (exported from IE9 Developer Tools Network Tab) • Export formats • Session Archive ZIP (SAZ) • HTTP Archive JSON v1.1 • HTTP Archive JSON v1.2 • Visual Studio Web Test XML • WCAT Load Test Script • Raw Files • Meddler Scripts (added in v2.3.5) • HTML5 AppCache Manifests (added in v2.3.6) • IE 9 -> Developer Tools -> Network tab blogs.msdn.com/b/ie/archive/2010/04/22/ie9-developer-tools-network-tab.aspx msdn.microsoft.com/en-us/library/gg130952(v=VS.85).aspx
  • 21.
    SAZ FILES • Speciallyformatted .zip files • Stores HTTP(S) traffic for later use • File -> Save • QuickExec box: dump or Savesaz filename • nExpert tab: Save Sessions w Report to Zip • File -> Load Archive • Can be Password-protected/Encrypted File -> Fiddler Options -> General • FiddlerCap • Used to troubleshoot website problems • Lightweight version of Fiddler • Non-technical user creates SAZ file • Sends to Expert for Analysis
  • 22.
    Demo TrafficExport / Import
  • 23.
    Fiddler application with Your application hosting extensions FiddlerCore Fiddler 2 Inspector2 Inspector2 ExecAction.exe IFiddlerExtension YourApp.exe IFiddlerExtension Fiddler ScriptEngine Your FiddlerScript FiddlerCore FiddlerCore Xceed*.dll Makecert.exe Xceed*.dll Makecert.exe Source: Microsoft
  • 24.
    SUMMARY • HTTP/HTTPS Debugger •More than just traffic capture • Runs as Proxy Server: • Local Machine • Remote Server • Written in C# • Free: www.fiddler2.com
  • 25.
    RESOURCES • MSDN blogs: • blogs.msdn.com/b/fiddler/ • blogs.msdn.com/b/nexpert/ • Discussion group: groups.google.com/group/httpfiddler • Twitter tag: #fiddler2 • Facebook: www.facebook.com/pages/Fiddler-Web-Debugger/214143918785 • Fiddler Book Table of Contents: https://groups.google.com/forum/m/#!topic/httpfiddler/0CKFAKYe88E • Google groups forum: https://groups.google.com/forum/m/#!forum/httpfiddler • Other Useful links: • stackoverflow.com/questions/tagged/fiddler • serverfault.com/search?q=fiddler • www.eggheadcafe.com/searchform.aspx?search=fiddler • HAR file to Page Speed • www.stevesouders.com/blog/2010/05/01/har-to-page-speed/ • stevesouders.com/flint/ • neXpert Performance Analysis Plugin www.microsoft.com/download/en/search.aspx?q=nexpert
  • 26.
    We need yourfeedback! Scan this QR code or visit http://svy.mk/sps2012be Our sponsors: