Tracing how a https api server communicates with smart devicesLog and debug/decrypt a windows application's...
Should I assume I have passed probation?
How to reduce predictors the right way for a logistic regression model
Do you waste sorcery points if you try to apply metamagic to a spell from a scroll but fail to cast it?
The Digit Triangles
Animation: customize bounce interpolation
How to test the sharpness of a knife?
Alignment of six matrices
How to leave product feedback on macOS?
I'm just a whisper. Who am I?
Isometric embedding of a genus g surface
Does the Crossbow Expert feat's extra crossbow attack work with the reaction attack from a Hunter ranger's Giant Killer feature?
Air travel with refrigerated insulin
Has the laser at Magurele, Romania reached a tenth of the Sun's power?
When and why was runway 07/25 at Kai Tak removed?
Given this phrasing in the lease, when should I pay my rent?
How much do grades matter for a future academia position?
Why the "ls" command is showing the permissions of files in a FAT32 partition?
Echo with obfuscation
Anime with legendary swords made from talismans and a man who could change them with a shattered body
Would this string work as string?
Is there a distance limit for minecart tracks?
What does "Scientists rise up against statistical significance" mean? (Comment in Nature)
How can I, as DM, avoid the Conga Line of Death occurring when implementing some form of flanking rule?
Quoting Keynes in a lecture
Tracing how a https api server communicates with smart devices
Log and debug/decrypt a windows application's HTTPS trafficWireshark Not Displaying Packets From Other Network Devices, Even in Promisc ModeMonitor network connection, auto responsehow to see all network requests made by an applicationudp client sending ICMP “port unreachable” when receiveing messages from the serverHow do I get Wireshark to filter for a specific web host?packet sniffing 3dsnginx http to https proxy with self-signed certificateHow do I setup Fiddler to advertise it as real server under test?Forcing HTTPS through proxy by DNS / How works “Smart DNS” with HTTPS?
I've been trying to work out for days how the TP-Link API communicates with the HS100 or any other TP-Link smart device. There is no official documentation, and it's been driving me mad. I use Insomnia REST client to post JSON requests to the API server (https://wap.tplinkcloud.com), and can see simple back and forth requests. However, when trying to control a smart device, I have no idea how the response it transmitted on my network to the device. I've tried Wireshark analysis, but due it being a https server, all data is encrypted. I have used Fiddler and Live HTTP Headers for Chrome to monitor packets leaving my client machine, but I am interested in response and how it reaches the device. My initial guess that the response is sent to the router and then broadcast across the network, but I don't understand how the API server would know the address of the router, considering that the POST request can be sent from any network. My second guess is that the device itself polls to the server, but I can see no evidence of any traffic to or from the device in Wireshark. The only interesting thing is that the device periodically sends out ARP requests for the default gateway, yet this can't be the polling because the intervals are so long, yet the update to the device state is almost instantanious. I'll add a screenshot of Wireshark logs at the point of the request. 07 IPV4 Addresses are the machine making the request, and 54 addresses are the API server. I understand that this is a long question, but I feel like I have exhausted my options based on my ameteur knowledge. Any advice or solutions would be greatly appreciated, thanks. Wireshark results
networking wireshark https sniffing api
New contributor
add a comment |
I've been trying to work out for days how the TP-Link API communicates with the HS100 or any other TP-Link smart device. There is no official documentation, and it's been driving me mad. I use Insomnia REST client to post JSON requests to the API server (https://wap.tplinkcloud.com), and can see simple back and forth requests. However, when trying to control a smart device, I have no idea how the response it transmitted on my network to the device. I've tried Wireshark analysis, but due it being a https server, all data is encrypted. I have used Fiddler and Live HTTP Headers for Chrome to monitor packets leaving my client machine, but I am interested in response and how it reaches the device. My initial guess that the response is sent to the router and then broadcast across the network, but I don't understand how the API server would know the address of the router, considering that the POST request can be sent from any network. My second guess is that the device itself polls to the server, but I can see no evidence of any traffic to or from the device in Wireshark. The only interesting thing is that the device periodically sends out ARP requests for the default gateway, yet this can't be the polling because the intervals are so long, yet the update to the device state is almost instantanious. I'll add a screenshot of Wireshark logs at the point of the request. 07 IPV4 Addresses are the machine making the request, and 54 addresses are the API server. I understand that this is a long question, but I feel like I have exhausted my options based on my ameteur knowledge. Any advice or solutions would be greatly appreciated, thanks. Wireshark results
networking wireshark https sniffing api
New contributor
add a comment |
I've been trying to work out for days how the TP-Link API communicates with the HS100 or any other TP-Link smart device. There is no official documentation, and it's been driving me mad. I use Insomnia REST client to post JSON requests to the API server (https://wap.tplinkcloud.com), and can see simple back and forth requests. However, when trying to control a smart device, I have no idea how the response it transmitted on my network to the device. I've tried Wireshark analysis, but due it being a https server, all data is encrypted. I have used Fiddler and Live HTTP Headers for Chrome to monitor packets leaving my client machine, but I am interested in response and how it reaches the device. My initial guess that the response is sent to the router and then broadcast across the network, but I don't understand how the API server would know the address of the router, considering that the POST request can be sent from any network. My second guess is that the device itself polls to the server, but I can see no evidence of any traffic to or from the device in Wireshark. The only interesting thing is that the device periodically sends out ARP requests for the default gateway, yet this can't be the polling because the intervals are so long, yet the update to the device state is almost instantanious. I'll add a screenshot of Wireshark logs at the point of the request. 07 IPV4 Addresses are the machine making the request, and 54 addresses are the API server. I understand that this is a long question, but I feel like I have exhausted my options based on my ameteur knowledge. Any advice or solutions would be greatly appreciated, thanks. Wireshark results
networking wireshark https sniffing api
New contributor
I've been trying to work out for days how the TP-Link API communicates with the HS100 or any other TP-Link smart device. There is no official documentation, and it's been driving me mad. I use Insomnia REST client to post JSON requests to the API server (https://wap.tplinkcloud.com), and can see simple back and forth requests. However, when trying to control a smart device, I have no idea how the response it transmitted on my network to the device. I've tried Wireshark analysis, but due it being a https server, all data is encrypted. I have used Fiddler and Live HTTP Headers for Chrome to monitor packets leaving my client machine, but I am interested in response and how it reaches the device. My initial guess that the response is sent to the router and then broadcast across the network, but I don't understand how the API server would know the address of the router, considering that the POST request can be sent from any network. My second guess is that the device itself polls to the server, but I can see no evidence of any traffic to or from the device in Wireshark. The only interesting thing is that the device periodically sends out ARP requests for the default gateway, yet this can't be the polling because the intervals are so long, yet the update to the device state is almost instantanious. I'll add a screenshot of Wireshark logs at the point of the request. 07 IPV4 Addresses are the machine making the request, and 54 addresses are the API server. I understand that this is a long question, but I feel like I have exhausted my options based on my ameteur knowledge. Any advice or solutions would be greatly appreciated, thanks. Wireshark results
networking wireshark https sniffing api
networking wireshark https sniffing api
New contributor
New contributor
New contributor
asked 8 mins ago
AuspexisAuspexis
12
12
New contributor
New contributor
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Auspexis is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1415849%2ftracing-how-a-https-api-server-communicates-with-smart-devices%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Auspexis is a new contributor. Be nice, and check out our Code of Conduct.
Auspexis is a new contributor. Be nice, and check out our Code of Conduct.
Auspexis is a new contributor. Be nice, and check out our Code of Conduct.
Auspexis is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1415849%2ftracing-how-a-https-api-server-communicates-with-smart-devices%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown