Penny Coventry

How to fiddler with

SharePoint 2010

#SPSBE

#SPSBE23

ABOUT ME

• Independent Consultant

• Author/Co-author 10 SharePoint Books

• Trainer

• Worked with SharePoint since 2001

• Based in UK, work Europe & US

• Microsoft MVP SharePoint Server

• Blogs/Web Site

• http://www.sharepointdesignerstepbystep.com/

• Twitter: @pjcov

A big thanks to our sponsors

Venue Sponsor

Platinum Sponsors

Gold Premium Sponsors

Gold Sponsors

CONTENT

• What is it and how does it Work?

• Getting to Know Fiddler

• Traffic Import

• Summary

• Resources

WHAT IS FIDDLER?

IT’S JUST ONE OF THE TOOLS OF YOUR TRADE

• Log analysis

• SPDiag

• ULSViewer

• Performance Analyzer Logs

(PAL)

• IIS Log Parser

• Http roundtrip analysis

• Fiddler

• Netmon 3.4

• Developer

• SPMonitoredScope

• Developer Dashboard

• Fx Cop (.NET Code Analysis)

• SP Dispose Check

• IE Dev Toolbar

• Profiling

• Perfmon

• SQL Profiler

• Win DBG

• SQLIO Disk Subsystem Benchmark Tool

BUT REALLY – WHAT IS IT?

• It’s Free

• First Released October 2003

• Developed by one man:

Microsoft employee: Eric Lawrence

WHAT DOES IT DO?

• Capture and view all HTTP and HTTPS

• “Fiddle” with incoming and outgoing data

• Modifies Page Requests and Responses

• Manipulates timing

• Decrypts HTTPS traffic

WHO USES FIDDLER?

• Microsoft engineers

• Support teams

• Lots of external web developers (10K+ downloads per week)

• Security researchers

• SharePoint Admins

• …

• Some bad guys

HOW DOES FIDDLER WORK?

Internet

Explorer WinINET

Office

CryptoAPI WinHTTP

Fiddler

Firefox

Company

Proxy http://internet

Firewall

SPD

2010

Source: Microsoft

DEMO

Getting to Know Fiddler

• A Quick Tour of Fiddler

SESSION ICONS

FILTERING HTTP TRAFFIC

• Application Type Filter - Toggle

• QuickExec box

• Process Filter

• Filters tab

• Find Sessions

• Rules

QUICKEXEC BOX

• Type commands:

• Cls

• ?sometext

• >40000

• =301

• =POST

http://www.fiddler2.com/fiddler/help/quickexec.asp

• Write Your Own – FiddlerScript

• neXpert Performance Tool

• Adds commands

• Generates HTML recommendations report

HELP WITH SHAREPOINT CAPTURES

• Kerberos

www.microsoft.com

/download/en/

details.aspx?id=23176

INFOPATH

• Darvish Shadravan:

blogs.msdn.com/b/shivajin/archive/2009/05/11/deep-dive-on-infopath-request-and-response.aspx

ipfswebtest.codeplex.com/

Demo

Filters

DEBUGGING NON-WINDOWS CLIENTS

Source: Microsoft

PC

MAC

iPad

Linux

Windows

Phone

http://internet Fiddler

WHAT ABOUT FIREFOX?

• Used to be a problem

• Reconfigure proxy settings every time you start and

stop Fiddler

• FiddlerHook pluggin for Firefox 3+

• Firefox proxy settings to

• Use system proxy

• Behaves like IE

DEMO

Remote Clients

EXPORT / IMPORT • Import web traffic from other tools

• HTTP Archive JSON (.har)

• HTTP Archive XML (exported from IE9 Developer Tools Network Tab)

• Export formats

• Session Archive ZIP (SAZ)

• HTTP Archive JSON v1.1

• HTTP Archive JSON v1.2

• Visual Studio Web Test XML

• WCAT Load Test Script

• Raw Files

• Meddler Scripts (added in v2.3.5)

• HTML5 AppCache Manifests (added in v2.3.6)

• IE 9 -> Developer Tools -> Network tab

blogs.msdn.com/b/ie/archive/2010/04/22/ie9-developer-tools-network-tab.aspx

msdn.microsoft.com/en-us/library/gg130952(v=VS.85).aspx

SAZ FILES • Specially formatted .zip files

• Stores HTTP(S) traffic for later use

• File -> Save

• QuickExec box: dump or Savesaz filename

• nExpert tab: Save Sessions \w Report to Zip

• File -> Load Archive

• Can be Password-protected/Encrypted File -> Fiddler Options -> General

• FiddlerCap

• Used to troubleshoot website problems

• Lightweight version of Fiddler

• Non-technical user creates SAZ file

• Sends to Expert for Analysis

Demo

Traffic Export / Import

Fiddler 2

Fiddler ScriptEngine

Inspector2

Inspector2

IFiddlerExtension

IFiddlerExtension

FiddlerCore

Exe

cAct

ion.

exe

YourApp.exe

FiddlerCore

Fiddler application with

extensions

Your application hosting

FiddlerCore

Your FiddlerScript

Xceed*.dll Makecert.exe Xceed*.dll Makecert.exe

Source: Microsoft

SUMMARY

• HTTP/HTTPS Debugger

• More than just traffic capture

• Runs as Proxy Server:

• Local Machine

• Remote Server

• Written in C#

• Free: www.fiddler2.com

RESOURCES • MSDN blogs:

• blogs.msdn.com/b/fiddler/

• blogs.msdn.com/b/nexpert/

• Discussion group: groups.google.com/group/httpfiddler

• Twitter tag: #fiddler2

• Facebook: www.facebook.com/pages/Fiddler-Web-Debugger/214143918785

• Fiddler Book Table of Contents: https://groups.google.com/forum/m/#!topic/httpfiddler/0CKFAKYe88E

• Google groups forum: https://groups.google.com/forum/m/#!forum/httpfiddler

• Other Useful links:

• stackoverflow.com/questions/tagged/fiddler

• serverfault.com/search?q=fiddler

• www.eggheadcafe.com/searchform.aspx?search=fiddler

• HAR file to Page Speed

• www.stevesouders.com/blog/2010/05/01/har-to-page-speed/

• stevesouders.com/flint/

• neXpert Performance Analysis Plugin www.microsoft.com/download/en/search.aspx?q=nexpert

We need your feedback!

Scan this QR code or visit

http://svy.mk/sps2012be

Our sponsors: