Parse a Fiddler .saz archive and return an overview. Archives are cached; use reload=true to re-read.

Args: saz_path: Path to the .saz file. reload: Re-parse the file even if already cached.

List sessions (method, URL, status, duration, size, process...) with pagination.

Args: saz_path: Path to the .saz file (parsed on first use). limit: Max sessions to return (1-500). offset: Skip the first N sessions (pagination).

Full details of one session: request & response start lines, headers, bodies, timers, flags.

This is the only tool that returns the complete (unredacted) URL and bodies — intended for deep inspection of a specific session.

Args: saz_path: Path to the .saz file. index: Session number (1-based, as shown by list_sessions). include_body: Decode and show bodies (may be truncated). max_body_chars: Max chars of each decoded body to include.

Search/filter sessions by host, method, status, URL keyword or regex, body keywords, size and duration.

Args: saz_path: Path to the .saz file. host: Substring match on Host[:port]. method: HTTP method, e.g. GET/POST (case-insensitive). status: Exact status code. status_min / status_max: Status code range. url_keyword: Case-insensitive substring of the URL. url_regex: Regex (Python syntax, max 200 chars) matched against the URL. req_body_keyword: Substring search inside the decoded request body. resp_body_keyword: Substring search inside the decoded response body. min_size / max_size: Request+response body size range in bytes. min_ms / max_ms: Total duration range in milliseconds. only_errors: Only 4xx/5xx responses. only_redirects: Only 3xx responses. only_success: Only 2xx responses. with_response: True/False to require/forbid a response. websocket: True/False to require/forbid WebSocket messages. limit: Max sessions returned (1-1000).

Aggregate statistics: method/status/host distribution, traffic volume, duration percentiles, error samples.

Args: saz_path: Path to the .saz file.

Rank sessions by total duration (Fiddler TOTAL = ClientDoneResponse - ClientBeginRequest).

Args: saz_path: Path to the .saz file. top_n: How many slowest sessions to return (1-100). min_ms: Only consider sessions slower than this threshold.

Scan traffic for security issues: cleartext credentials, secret tokens in URLs/bodies, cookie flags, sensitive files, PII leakage.

Args: saz_path: Path to the .saz file. max_findings: Cap on reported findings (1-2000).