I haven't tried this app, and there are some restrictions on the type of devices supported (see their page)įor Android phones: tPacketCapture uses the Android VPN service to intercept packets and capture them. Tip: You will need to make sure you supply the right interface name for the capture and this varies from one device to another, eg -i eth0 or -i tiwlan0 - or use -i any to log all interfacesįor Android 4.0+ phones: Android PCAP from Kismet uses the USB OTG interface to support packet capture without requiring root. This app is a tcpdump wrapper that will install tcpdump and enable you to start captures using a GUI. To add a column for the destination port, right-click any of the present columns then select “Column Preferences”.For Android phones, any network: Root your phone, then install tcpdump on it. Only several properties are displayed but this can be modified to display additional properties such as the destination port number, which is useful for identifying the remote service that your host was connecting to. Each packet displayed has some properties such as the source and destination IP addresses and protocol. To view the Time column in a human-readable format, select View > Time Display Format > Date and Time of Day. Customising the Displayīy default, Wireshark displays the time in seconds since the beginning of capture. Lastly, the bottom part of the screen displays the Packet Bytes view, which contains the data portion of the selected packet where the hex representation of the packet data is on the left while on the right this is displayed in ASCII format. Each section contains additional information which can be viewed by expanding the section. Below that is the Packet Details view which contains detailed information on each section of the packet. Next is the Packet List view which shows each packet that was sent and received during the capture.

Going downwards, there is a field for filtering and displaying specific packets based on certain conditions. The main toolbar at the top displays various buttons such as starting and stopping a capture, selecting another network interface to listen on, etc.

Use wireshark to view network traffic