Capture and analyze iphone data packets on mac, maciphone
Mac system version: mac 10.10 Yosemite
Xcode version: 6.3.1
It is necessary to capture packets when Tracking bugs or analyzing app communication ideas of other companies. The following describes how Wireshark intercepts iphone data packets.
Install wireshark
Wireshark depends on x11, so first confirm that x11 is installed and the mac comes with it. You can enable the upgrade.
Go to utility-x11 and click x11 on the menu bar to check for updates. The process of extracting Package content in the middle is long and patient.
Download the latest Wireshark version. Try to download it on the official website:
Https://www.wireshark.org/download.html (need to flip ..)
Installation, the installation process is very simple, all the way to the next step.
Wireshark 1.12.4 Intel 64 downloaded here cannot run after installation. The x11 location is incorrect. Console execution:
Sudo ln-s/opt/X11/usr/X11
The problem persists.
There is no way to download a XQuartz-2.7.7:
Http://xquartz.macosforge.org/landing/
Install and run Wireshark. After you have clicked the wireshark icon for more than 10 minutes, you can finally open it. You don't need to wait until you open it again.
Capture iphone data
To capture iphone data, you must first make iphone data use mac. There are many ways to set up proxies on the Internet, which are complicated, and some require jailbreak. It is not necessary. You only need to link the data line and run the following command on the mac terminal:
Rvictl-s iphone device id
At this time, all iphone network traffic will go through the mac connected to the iphone, and the iphone data will still go through its own network. For example, if the iphone is connected to a 3G network, the data will still be sent and received through 3G, instead of using a mac network. Disconnect:
Rvictl-x iphone device id
After the device is connected, a corresponding virtual network interface will appear on the mac, named rvi0 (if there are multiple iPhones, accumulate, rvi1, rvi2 ...)
You only need to start Wireshark and listen to the rvi interface to capture the iPhone data. Of course, you can also use tools other than Wireshark to capture or analyze the data.
To obtain the iphone device ID, you can use xcode-windows-devices and select the corresponding device, which is in the identifier on the right.
