[jbossws-dev] [Design of JBoss Web Services] - Re: Tcp Monitor liketool for jboss

Burr Sutter burr.sutter at jboss.com
Thu Nov 16 08:45:56 EST 2006


I will have to give it a try after we get back from Berlin.
Thanks,
Burr


----- Original Message -----
From: jbossws-dev-bounces at lists.jboss.org <jbossws-dev-bounces at lists.jboss.org>
To: jbossws-dev at lists.jboss.org <jbossws-dev at lists.jboss.org>
Sent: Thu Nov 16 07:26:34 2006
Subject: [jbossws-dev] [Design of JBoss Web Services] - Re: Tcp Monitor liketool for jboss

I probably I didn't correctly understand what Burr is saying. I try to answer, just to understand better what are his doubts about:

anonymous wrote : 
  | I actually demo the use of tcpmon since I think it is such a vital tool
  | for "debugging".  The basic idea is that you find a consumer and
  | producer that are happy with each other and capture the SOAP
  | conversation (e.g. .NET to .NET) then run your Java to .NET to see what
  | the problem might be.
  | 
And this is the same idea of Lms. Note that clients have to change the address used to invoke webservice, it isn't a transparent proxy.

anonymous wrote : 
  | With that said, I don't believe a web-based application will serve me
  | properly.  I like the really little swing-based tcpmon.  I've seen other
  | presenters talk about using it for hacking websites.  You can intercept
  | the flow of track between the browser and the server and figure out if
  | they are using any hidden fields to carry important information (e.g.
  | the price of an item being placed in a shopping cart).
  | 
I didn't understand what is the real difference between a swing gui and a web based gui in that. It was realy useful for us to debug service call by remote client that could only send request to our internet exposed machine (dmz) where I haven't X server configured (and I don't want one)
Speaking of security: I think there are more interesting malicious sw around the world than a web based tcp monitor, and I think a malicious use of Lms isn't different than a malicious use of tcp mon.
 


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3986510#3986510

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3986510
_______________________________________________
jbossws-dev mailing list
jbossws-dev at lists.jboss.org
https://lists.jboss.org/mailman/listinfo/jbossws-dev
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 4098 bytes
Desc: not available
Url : http://lists.jboss.org/pipermail/jbossws-dev/attachments/20061116/c8c3359f/attachment.bin 


More information about the jbossws-dev mailing list