Is there any way to sniff named pipe traffic in Windows? Is there any way to sniff named pipe traffic in Windows? windows windows

Is there any way to sniff named pipe traffic in Windows?


There's no official way.

Use API hooking. Hook ReadFile and/or WriteFile, maybe also CreateFileA/W (assuming that the app is a pipe client) and do the necessary things on their invocation.

Microsoft has also its own library for API hooking - Detours .