HTTP and database SQL analysis and eavesdropping technology

Using Tunnel,tunnel is a technical title that puts it between the real server and the client. The debug phase can use Webcream to run Tomcat as a true server for impersonation.

Specific: Tcpmon with Apache axis and the tools in its project. But tunnel has a drawback, is to reconfigure the client and server to let them send the request to the tunnel agent.

Other:

Listening on the RMI protocol: RMI refers to remote method invocation, which is called by the JRMP (Java Remote Method Protocol) or IIOP (Internet Inter-ORB Protocol) protocol sends binary information to a remote host, both JRMP and IIOP are based on the TCPIP protocol, so you can use a network sniffer to listen. RMI uses the concept of a stream to represent the data transfer, so he differs from the HTTP protocol, but these streaming data can also be embedded in the HTTP message body domain for transmission. To perform remote calls, Jrmi uses the Java Object Serialization protocol to format parameter names and function names as binary information transmitted over a line, so that all remote calls follow the same format on the binary. The package format for an RMI transmission is as follows: RMI protocol header, followed by host IP address, server object ID and mixed distributed garbage collection information, and finally the message body information.

Other:

Listening for SQL queries on JDBC: In order to effectively listen for database calls, we must replace the JDBC driver with the wrapper that records the SQL statement, and then delegate the actual work to the real driver, P6spy is an open source wrapper.