Capturing Internet Connection Sharing (ICS) traffic using Fiddler

How can we capture HTTP traffic that goes through an ICS connection?

Full details:

• I have a PC connected to internet via Ethernet.
• PC has set up a Wifi Hotspot using Internet Connection Sharing (ICS) to share out internet to mobile devices.
• I have a mobile device that is connected to the Wifi Hotspot.
• I want to capture all traffic incoming from the mobile device. And the kicker: Mobile device does not have ability to set proxy settings

This would be easy if the mobile device could set a proxy server, but unfortunately it does not have that ability.

Also, I realize I could use wireshark here, but I need to decrypt https traffic to a server I don't have access to.

Solution 1:

I think that the Wifi hotspot you made is secured. That is you have made either WPA2 or WPA or WEP secured Wifi hotspot.Here is a link to decrypt 802.11 encrypted packets:

How to Decrypt 802.11 packets

How ever if you don't want to do decryption then you can create an OPEN hotspot. Then try to capture packet using Wireshark.

Another technique are also available that can be used to sniff other's packet. It is called arp-poisoning.[please comment if you want more detail about it.]

Also you can set Proxy authentication in your mobile if you are using an Android phone version 4.0 or up. There is an app named DRONY which enables us to set proxy authorization in android phones.