如何在Wireshark上捕获移动电话流量?
当前回答
在你的电脑上安装Fiddler,并在你的Android设备上使用它作为代理。
来源:http://www.cantoni.org/2013/11/06/capture-android-web-traffic-fiddler
其他回答
以下是一些建议:
For Android phones, any network: Root your phone, then install tcpdump on it. This app is a tcpdump wrapper that will install tcpdump and enable you to start captures using a GUI. Tip: You will need to make sure you supply the right interface name for the capture and this varies from one device to another, eg -i eth0 or -i tiwlan0 - or use -i any to log all interfaces For Android 4.0+ phones: Android PCAP from Kismet uses the USB OTG interface to support packet capture without requiring root. I haven't tried this app, and there are some restrictions on the type of devices supported (see their page) For Android phones: tPacketCapture uses the Android VPN service to intercept packets and capture them. I have used this app successfully, but it also seems to affect the performance with large traffic volumes (eg video streaming) For IOS 5+ devices, any network: iOS 5 added a remote virtual interface (RVI) facility that lets you use Mac OS X packet trace programs to capture traces from an iOS device. See here for more details For all phones, wi-fi only: Set up your Mac or PC as a wireless access point, then run wireshark on the computer. For all phones, wi-fi only: Get a capture device that can sniff wi-fi. This has the advantage of giving you 802.11x headers as well, but you may miss some of the packets Capture using a VPN server: Its fairly easy to set-up your own VPN server using OpenVPN. You can then route your traffic through your server by setting up the mobile device as a VPN client and capture the traffic on the server end.
除了鲁佩罗精彩的回答之外,还有一个“肮脏”但非常有效的技巧:
对于所有手机,任何(本地)网络:将您的PC设置为Man-In-The-Middle移动设备。
使用Ettercap在您的移动设备和路由器之间进行ARP欺骗,您的所有移动通信将出现在Wireshark中。有关设置细节,请参阅本教程
Android应用程序实现了一个VPN,记录Android设备上的所有网络流量。您不需要在您的PC上设置任何VPN/代理服务器。不需要根。支持SSL解密,而tPacketCapture不支持。它还包括一个良好的日志查看器。
让你的笔记本电脑成为手机(任何手机)的wifi热点,并将其连接到互联网。使用wireshark在wifi接口上嗅探流量。
你会知道很多反隐私的东西!
我也遇到过类似的问题,启发我开发了一款应用程序,可以帮助捕捉Android设备的流量。该应用程序具有SSH服务器,允许您在Wireshark中有流量(sshdump Wireshark组件)。由于该应用程序使用名为VPNService的操作系统功能来捕获流量,因此它不需要根访问。
该应用程序处于早期测试阶段。如果你有任何问题/建议,请尽管告诉我。
从播放中下载
教程,你可以在其中阅读更多的细节
推荐文章
- 更改UITextField和UITextView光标/插入符颜色
- 如何隐藏动作栏之前的活动被创建,然后再显示它?
- 是否有一种方法以编程方式滚动滚动视图到特定的编辑文本?
- 在Android中将字符串转换为Uri
- 'Project Name'是通过优化编译的——步进可能会表现得很奇怪;变量可能不可用
- 如何在NestedScrollView内使用RecyclerView ?
- 如何设置回退按钮文本在Swift
- 移动到另一个EditText时,软键盘下一步点击Android
- Android应用中的GridView VS GridLayout
- Activity和FragmentActivity的区别
- 右对齐文本在android TextView
- 模拟器慢动作动画现在打开了吗?
- 如何为TableView创建NSIndexPath
- 权限拒绝:start前台需要android.permission.FOREGROUND_SERVICE
- 滑动删除和“更多”按钮(就像iOS 7的邮件应用程序)