search

emanuele-f / PCAPdroid

No-root network monitor, firewall and PCAP dumper for Android
https://emanuele-f.github.io/PCAPdroid
GNU General Public License v3.0
2.09k stars 261 forks source link

Implement Wireshark sshdump #195

Open besendorf opened 2 years ago

besendorf commented 2 years ago

In addition to saving a .pcap file to the phone or serving it via http it would be a nice addition to support Wiresharks sshdump which send the live pcap data over ssh. This way you could analyse the traffic in real time on a remote PC.

I saw that https://github.com/egorovandreyrm/pcap-remote implemented this feature but unfortunately the project is abandoned and the source for the ssh server is not Open Source if I looked correctly.

emanuele-f commented 2 years ago

On Linux you can already analyze the traffic on Wireshark in real time. This feature would make it possible to do the same on Windows. Please note that currently this is not a priority

besendorf commented 2 years ago

Oh you're right. I didnt read carefully. The first two senteces of the description led me to believe it isnt possible.I missed the udp stream option.

emanuele-f commented 2 years ago

You can also combine curl with the http server mode to get a live tcp-based capture, check out the user guide