MoBiLiS iN MoBiLi

• WinSockExpert
  The writer seemed to stop develop this software long ago, and it's still in beta, many of the functions are not finished yet like Fileters. Still it's a good capture tool, it supports HEX/Text display switching and you can select a current process to capture. But you can not select multipule processes or start & capture a new process. WSockExpert DOES capture HTTPS sessions but it does not decode them. Also there seemed to be some problem with it's process injection that sometimes capture may fail and you could not start or pause a capture. Even it's captured destination IP address may not be accurate. Anyway it's the most popular capture tool in mainland China.
• Ethereal/Wireshark
  Tools like this is working on a very low OSI layer. Personally I do not recommand these tools for application-level packet capturing.
• Sniffer/Sniffer Pro
  How can I just capture a single process not my NIC?
• HTTP Watch Pro
  It's a wonderful tool which works as an IE plug-in. There is nothing to say about it's powerful function, the only problem is it could ONLY canpture IE while most of the time I am using Maxthon Browser.
• HTTPDebugger
  It's far better than WinSockExpert but it can not capture HTTPS sessions
• HTTPLook
  This tool looks good and does good, but not on Vista. Pity.

And finally I chose HttpAnalyzer. It meet all my demands:

• Capture just a process, start a process & capture
• Works with HTTP and HTTPS
• Not an IE plug-in
• Filter captured data
• Supports IE7 and Vista

That's it!