How to see the URL of the outgoing traffic from the OS?

Question

macOS

There are programs, web installers that weigh several megabytes, and during installation they download and install the program itself.

I want to see the URL addresses that these programs access when running on my computer.

More specifically, we are talking about the latest version of Parallels Desktop.

I heard that wireshark is used to analyze traffic, I launched it, turned on the capture, but it displays the intercepted packets, and I only need the URLs that are being requested from my OS.
How to do it?

Answer 1

Intercept traffic during installation using a wireshark, save the intercepted to a file. When saving, select the file type second from the top, like Wireshark / tcpdump - pcap. Then you can use the Networkminer application ( https://www.netresec.com/?page=Networkminer even the free version will do). I did not run it on a poppy, but only on Windows and Linux. On Windows, it's easiest, there it's like a portbill. Open the .pcap file with the intercepted traffic in it. It parses for a few seconds and there you will see in the first tab "Hosts" a tree with all the IPs (and a number of domain names) where your computer has been breaking during this time. Here it is only necessary to somehow separate the necessary, from the traffic of other programs of the system :) You can, for example, during installation, cover all the "consumers" of the Internet as much as possible.

Answer 2

Well, the same wireshark would have thrown it into Google, the very first example from Habr is an excellent article
ps http has not been used by anyone adequate for a long time, and almost nothing can be done with https (you need to replace certificates, and inside the application)