gojue / ecapture

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
https://ecapture.cc
Apache License 2.0
13.47k stars 1.42k forks source link

ver 0.8.9 can`t work on android kernel 6.1.99 , but ver 0.6.1 did work #659

Open r0ysue opened 2 weeks ago

r0ysue commented 2 weeks ago

ver 0.8.9 can`t work on android kernel 6.1.99 , but ver 0.6.1 did work tried -b 0/1/2 all failed

./ecapture tls -b 1 -p 11515 --hex should capture all the traffic but nothing showed off

d66e54004aa0bd1db342047b89d37753

tried version 0.6.1 that works fine c2340d5ec475a11162a336fda2c8721a

Linux Server/Android (please complete the following information):

cfc4n commented 2 weeks ago

Try using --ssl_version="boringssl 1.1.1" flag.

r0ysue commented 2 weeks ago

nothing happens ...

WechatIMG106

xxxxxliil commented 1 week ago

把关于设备的页面发一下看看

r0ysue commented 1 week ago

FpOeGXJczTrp2ADE9OFIaI2dv_4Q Fkp1R3Q8q06hBa1ZVOPI5ht0EyZW