This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi, i wanted to know if these apps "Shark for Root" and "Microsoft Network Analyzer" are able to perform GSM packets capture on a cell phone? later to be transferred to a computer and analyzed on Wireshark.

asked 27 Sep '13, 00:02

Arslan's gravatar image

Arslan
11112
accept rate: 0%

converted 27 Sep '13, 00:10


Already answered in another thread but here it is again:

The standard packet capture tools won't allow you to capture "GSM" packets.

On an Android phone, once the cellular modem establishes a data session with the network, it will create an interface (rmnet0 or rmnet_usb0 for example). That interface is what the Android OS uses to exchange packets from the OS to the cellular modem in the phone.

Once it reaches the cellular modem, packets get encapsulated in GTP (for user data). The control packets (non-access stratum signalling for example) is generated at the cellular modem itself.

In order to capture these messages directly from the phone, you will need specialized equipment of software capable of connecting and interpreting the Qualcomm diagnostic monitor (DM) port on the phone. QXDM, TEMS Investigation and Swissqual are examples of tools capable of doing that.

I don't know of any free tool capable of interfacing correctly with the DM port but I'd be interested in one exist.

permanent link

answered 27 Sep '13, 06:39

Kiloohm's gravatar image

Kiloohm
412
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×37
×37

question asked: 27 Sep '13, 00:02

question was seen: 3,600 times

last updated: 27 Sep '13, 06:39

p​o​w​e​r​e​d by O​S​Q​A