search

tomer8007 / chromium-ipc-sniffer

A tool to capture communication between Chromium processes on Windows
GNU General Public License v3.0
367 stars 57 forks source link

Wireshark not properly displaying IPC message details #10

Closed ihack4falafel closed 1 year ago

ihack4falafel commented 1 year ago

Hi there,

Not sure what I'm missing here but for whatever reason Wireshark is not displaying mojo IPC communication details as it supposed to based on your wiki examples. Here's screenshots for more details:

Capture

Capture2

Your help is much appreciated!

tomer8007 commented 1 year ago

Hmm, this works for me but I'm using Chrome 109.0.5414.120. Perhaps your Chrome is using IPCZ?

ihack4falafel commented 1 year ago

Looks like it.. it worked for me as soon as I used Chromium v109.0.5414.120. Any plans to support IPCZ in the near future?

Capture

tomer8007 commented 1 year ago

Yes, I plan to support as much as I can but unfortunately in full IPCZ mode some messages are going through shared memory, so this tool may not be able to see those.

ihack4falafel commented 1 year ago

Fair enough and looking forward to it. Great tool btw!

tomer8007 commented 1 year ago

@ihack4falafel You can disable IPCZ by running chrome.exe with the following arguments: --disable-features=MojoIpcz This way you don't have to use an older chrome version.

ihack4falafel commented 1 year ago

Yeah, I ended up using that once I took a look at issue #9 haha. Thanks for the heads up though!