monasticacademy/httptap
Httptap
httptap is a network utility for intercepting system-level packets and monitoring the HTTP and HTTPS traffic of Linux processes. It functions as a network packet sniffer and traffic monitor designed to capture and display real-time requests and responses sent by local applications.
The project includes a local traffic redirector that maps remote hostnames or IP addresses to localhost for service testing. To support detailed inspection, it features a TLS termination proxy for decrypting HTTPS traffic and a HAR file exporter that dumps captured data into the standard HTTP Archive format for external analysis.
The tool's technical capabilities cover kernel-level packet capture using eBPF, transparent proxy interception, and process-specific traffic filtering. It also provides local DNS redirection to override system name resolution.
Features
- HTTP Traffic Inspection - Provides real-time monitoring and inspection of HTTP and HTTPS requests and responses sent by Linux processes.
- Network Communication Debugging - Observes the outbound web communication of running programs to identify API errors or unexpected behavior.
- Real-Time Traffic Dashboards - Captures and displays HTTP and HTTPS requests and responses made by a specific process in real time.
- Packet Capture Implementations - Implements high-performance packet interception at the kernel level using eBPF programs.
- Process-Level Filters - Isolates network packets by matching kernel-level process identifiers to filter traffic from a single target application.
- Transparent Network Proxies - Reroutes outbound network traffic through a local listener without requiring client-side configuration changes.
- SSL/TLS Termination - Decrypts HTTPS traffic by acting as a proxy that terminates encrypted connections for inspection.
- Packet-Sniffing Analyzers - Intercepts network traffic at the packet level to analyze data sent by local applications.
- Local Redirection Rules - Routes network traffic from remote hostnames or IP addresses to a local machine for testing.
- Local DNS Mapping - Overrides system name resolution to map remote hostnames to local IP addresses for testing.
- Localhost Domain Mappings - Maps specific hostnames or IP addresses to the local machine to enable communication with local services.
- Local Service Address Mapping - Maps remote hostnames or IP addresses to localhost for local service testing.
- HAR File Exporters - Dumps intercepted network traffic into the standardized HTTP Archive format for external analysis.
- Network Traffic Analyzers - Exports captured web requests into HAR files for visualization and analysis in external tools.
- HAR Serialization - Formats captured request and response metadata into standardized HAR JSON structures for external analysis tools.
