Parsing Office Traffic: Message Analyzer &...
Transcript of Parsing Office Traffic: Message Analyzer &...
![Page 1: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/1.jpg)
Parsing Office Traffic: Message Analyzer & Fiddler
Jingyu Shao
Software Engineer
![Page 2: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/2.jpg)
Agenda
• Message Analyzer• What’s Message Analyzer
• Protocol analysis
• Parsers available
• Demo
• Resources
• Fiddler• Office Inspectors
• Demo
• Resources
• Comparison and how to chose
![Page 3: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/3.jpg)
What is Message Analyzer?
![Page 4: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/4.jpg)
Message Analyzer Protocol analysis
![Page 5: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/5.jpg)
Protocol Analysis
Message Analyzer Parsers Overview
Message Analyzer
Parsers for public protocols (e.g. HTTP, SOAP) and Windows protocols
![Page 6: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/6.jpg)
Office Parsers Packages
Office & SharePoint
92 parsersMS-LISTSWS, MS-ADMINS,MS-WEBSS, …
Exchange Web Service
35 parsersMS-OXWSCORE, MS-OXWSFOLD, MS-OXWSSYNC,….
Exchange Active Sync
4 parsersMS-ASCMD,MS-ASHTTP, MS-ASPROV, MS-ASWBXML WOPI/FSSHTTP
5 parsersMS-FSSHTTP,MS-FSSHTTPB, MS-FSSHTTPD, MS-WOPI, FileSyncBasic
Exchange MAPI
14 parsersMS-OXCDATA,MS-OXCROPS, MS-OXCRPC, MS-OXCMAPIHTTP,…
Skype for Business
12 parsersMS-CONFBAS, MS-SIPREGE, MS-TURN, MS-ICE, …
![Page 7: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/7.jpg)
Demo
![Page 8: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/8.jpg)
Office Parses Features
WBXML decoder for EAS
Message Recognition Binary XML decoding Validation*
* Not available for all parsers yet
![Page 9: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/9.jpg)
Message Analyzer Resources
• Download: http://www.microsoft.com/en-us/download/details.aspx?id=44226
• Operating Guide: https://technet.microsoft.com/en-us/library/jj649776.aspx
• Office Interoperability Blog:http://blogs.msdn.com/b/officeinteroperability/
• MA Blog:http://blogs.technet.com/b/messageanalyzer/
• Forum:https://social.technet.microsoft.com/Forums/en-US/home?forum=messageanalyzer
![Page 10: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/10.jpg)
Agenda
• Message Analyzer• What’s Message Analyzer
• Protocol analysis
• Parsers available
• Demo
• Resources
• Fiddler• Office Inspectors
• Demo
• Resources
• Comparison and how to chose
![Page 11: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/11.jpg)
Fiddler Office Inspectors
WOPI/FSSHTTP
MS-FSSHTTP,MS-FSSHTTPB, MS-FSSHTTPD, MS-WOPI
Exchange MAPI
MS-OXCDATA,MS-OXCROPS, MS-OXCRPC, MS-OXCMAPIHTTP,…
![Page 12: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/12.jpg)
Demo
![Page 13: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/13.jpg)
Fiddler Office Inspectors Resources
• Github Repos: MAPIHTTP:
https://github.com/OfficeDev/Office-Inspectors-for-Fiddler/tree/master/MAPIInspector
WOPI/FSSHTTP:
https://github.com/OfficeDev/Office-Inspectors-for-Fiddler/tree/master/FSSHTTPWOPIInspector
• Office Interoperability Blog:http://blogs.msdn.com/b/officeinteroperability/
![Page 14: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/14.jpg)
Agenda
• Message Analyzer• What’s Message Analyzer
• Protocol analysis
• Parsers available
• Demo
• Resources
• Fiddler• Office Inspectors
• Demo
• Resources
• Comparison and how to chose
![Page 15: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/15.jpg)
Comparison and how to choose
Capture• Numerous transport protocols supported
Protocol families supported• Office & SP
• EWS
• EAS
• MAPI
• WOPI/FSSHTTP
• Skype for Business
Community Participation• Parser source code
• Share through asset
Capture
• HTTP/S only
Protocol families supported
• Office & SP (let us know if you want this)
• EWS (let us know if you want this)
• EAS
• MAPI (HTTP)
• WOPI/FSSHTTP
• Skype for Business
Community Participation• Open Source in Github
![Page 16: Parsing Office Traffic: Message Analyzer & Fiddlerdownload.microsoft.com/.../day2/20160420_Open_session5.pdf · 2016/4/20 · •Message Analyzer •What’s Message Analyzer •Protocol](https://reader036.fdocuments.us/reader036/viewer/2022071012/5fca8b4f93cbe37b801a65a6/html5/thumbnails/16.jpg)
Thank You!