CellularPrivacy / Android-IMSI-Catcher-Detector

AIMSICD • Fight IMSI-Catcher, StingRay and silent SMS!
https://cellularprivacy.github.io/Android-IMSI-Catcher-Detector/
GNU General Public License v3.0
4.65k stars 940 forks source link

Further Logcat investigation #538

Open E3V3A opened 9 years ago

E3V3A commented 9 years ago

The logcat utility is very powerful and provides an incredible amount of info that we may be able to use, in case not available from API. This thread is about investigating these possibilities. For example in the source code we have:

  /** 50100 pdp_bad_dns_address (dns_address|3) */
  public static final int PDP_BAD_DNS_ADDRESS = 50100;

  /** 50101 pdp_radio_reset_countdown_triggered (out_packet_count|1|1) */
  public static final int PDP_RADIO_RESET_COUNTDOWN_TRIGGERED = 50101;

  /** 50102 pdp_radio_reset (out_packet_count|1|1) */
  public static final int PDP_RADIO_RESET = 50102;

  /** 50103 pdp_context_reset (out_packet_count|1|1) */
  public static final int PDP_CONTEXT_RESET = 50103;

  /** 50104 pdp_reregister_network (out_packet_count|1|1) */
  public static final int PDP_REREGISTER_NETWORK = 50104;

  /** 50105 pdp_setup_fail (cause|1|5), (cid|1|5), (network_type|1|5) */
  public static final int PDP_SETUP_FAIL = 50105;

  /** 50106 call_drop (cause|1|5), (cid|1|5), (network_type|1|5) */
  public static final int CALL_DROP = 50106;

  /** 50107 data_network_registration_fail (op_numeric|1|5), (cid|1|5) */
  public static final int DATA_NETWORK_REGISTRATION_FAIL = 50107;

  /** 50108 data_network_status_on_radio_off (dc_state|3), (enable|1|5) */
  public static final int DATA_NETWORK_STATUS_ON_RADIO_OFF = 50108;

  /** 50109 pdp_network_drop (cid|1|5), (network_type|1|5) */
  public static final int PDP_NETWORK_DROP = 50109;

  /** 50110 cdma_data_setup_failed (cause|1|5), (cid|1|5), (network_type|1|5) */
  public static final int CDMA_DATA_SETUP_FAILED = 50110;

  /** 50111 cdma_data_drop (cid|1|5), (network_type|1|5) */
  public static final int CDMA_DATA_DROP = 50111;

  /** 50112 gsm_rat_switched (cid|1|5), (network_from|1|5), (network_to|1|5) */
  public static final int GSM_RAT_SWITCHED = 50112;

  /** 50113 gsm_data_state_change (oldState|3), (newState|3) */
  public static final int GSM_DATA_STATE_CHANGE = 50113;

  /** 50114 gsm_service_state_change (oldState|1|5), (oldGprsState|1|5), (newState|1|5), (newGprsState|1|5) */
  public static final int GSM_SERVICE_STATE_CHANGE = 50114;

  /** 50115 cdma_data_state_change (oldState|3), (newState|3) */
  public static final int CDMA_DATA_STATE_CHANGE = 50115;

  /** 50116 cdma_service_state_change (oldState|1|5), (oldDataState|1|5), (newState|1|5), (newDataState|1|5) */
  public static final int CDMA_SERVICE_STATE_CHANGE = 50116;

  /** 50117 bad_ip_address (ip_address|3) */
  public static final int BAD_IP_ADDRESS = 50117;

  /** 50118 data_stall_recovery_get_data_call_list (out_packet_count|1|1) */
  public static final int DATA_STALL_RECOVERY_GET_DATA_CALL_LIST = 50118;

  /** 50119 data_stall_recovery_cleanup (out_packet_count|1|1) */
  public static final int DATA_STALL_RECOVERY_CLEANUP = 50119;

  /** 50120 data_stall_recovery_reregister (out_packet_count|1|1) */
  public static final int DATA_STALL_RECOVERY_REREGISTER = 50120;

  /** 50121 data_stall_recovery_radio_restart (out_packet_count|1|1) */
  public static final int DATA_STALL_RECOVERY_RADIO_RESTART = 50121;

  /** 50122 data_stall_recovery_radio_restart_with_prop (out_packet_count|1|1) */
  public static final int DATA_STALL_RECOVERY_RADIO_RESTART_WITH_PROP = 50122;

  /** 50123 gsm_rat_switched_new (cid|1|5), (network_from|1|5), (network_to|1|5) */
  public static final int GSM_RAT_SWITCHED_NEW = 50123;

  /** 50125 exp_det_sms_denied_by_user (app_signature|3) */
  public static final int EXP_DET_SMS_DENIED_BY_USER = 50125;

  /** 50128 exp_det_sms_sent_by_user (app_signature|3) */
  public static final int EXP_DET_SMS_SENT_BY_USER = 50128;

Thus using the binary switch for logcat, we might be able to see these, with something like:

logcat -d -B -b radio ...

In addition the logcat utility have some hidden functions as well, like -Q and --test...

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

SecUpwN commented 8 years ago

@larsgrefer, does #670 solve this as well? Not sure what the "Issue" is here or where to move this.

larsgrefer commented 8 years ago

@SecUpwN I don't think so. This Issue is about what information we can get out of logcat while #670 was about how we log into logcat

SecUpwN commented 8 years ago

This Issue is about what information we can get out of logcat

Thanks for clarifying. Since this Issue has no real goal to solve, is it subject to be closed now?

larsgrefer commented 8 years ago

As @E3V3A mentioned:

This thread is about investigating these possibilities.