9 androiddump - Provide interfaces to capture from Android devices
16 S<[ B<--extcap-version> ]>
18 S<[ B<--extcap-interfaces> ]>
19 S<[ B<--extcap-dlts> ]>
20 S<[ B<--extcap-interface>=E<lt>interfaceE<gt> ]>
21 S<[ B<--extcap-config> ]>
23 S<[ B<--fifo>=E<lt>path to file or pipeE<gt> ]>
24 S<[ B<--adb-server-ip>=E<lt>IP addressE<gt> ]>
25 S<[ B<--adb-server-tcp-port>=E<lt>TCP portE<gt> ]>
26 S<[ B<--logcat-text>=E<lt>TRUE or FALSEE<gt> ]>
27 S<[ B<--bt-server-tcp-port>=E<lt>TCP portE<gt> ]>
28 S<[ B<--bt-forward-socket>=E<lt>TRUE or FALSEE<gt> ]>
29 S<[ B<--bt-local-ip>=E<lt>IP addressE<gt> ]>
30 S<[ B<--bt-local-tcp-port>=E<lt>TCP portE<gt> ]>
33 S< B<--extcap-interfaces> >
34 S<[ B<--adb-server-ip>=E<lt>IP addressE<gt> ]>
35 S<[ B<--adb-server-tcp-port>=E<lt>TCP portE<gt> ]>
38 S< B<--extcap-interface>=E<lt>interfaceE<gt> >
39 S<[ B<--extcap-dlts> ]>
42 S< B<--extcap-interface>=E<lt>interfaceE<gt> >
43 S<[ B<--extcap-config> ]>
46 S< B<--extcap-interface>=E<lt>interfaceE<gt> >
47 S< B<--fifo>=E<lt>path to file or pipeE<gt> >
52 B<Androiddump> is a extcap tool that provide interfaces to capture from
53 Android device. There is only two requirements:
55 1. You must have Android SDK and add it PATH environment variable.
56 PATH should contain directory with tools like "adb" and "android".
57 Android SDK for various platform are available on:
58 https://developer.android.com/sdk/index.html#Other
60 2. You must have permission to Android devices. Some Android devices requires
61 on-screen authentication.
68 =item 1. Logcat Main (binary [<=Jelly Bean] or text)
70 =item 2. Logcat System (binary [<=Jelly Bean] or text)
72 =item 3. Logcat Events (binary [<=Jelly Bean] or text)
74 =item 4. Logcat Radio (binary [<=Jelly Bean] or text)
76 =item 5. Logcat Crash (text; from Lollipop)
78 =item 6. Bluetooth Hcidump [<=Jelly Bean]
80 =item 7. Bluetooth Bluedroid External Parser [Kitkat]
82 =item 8. Bluetooth BtsnoopNet [>=Lollipop]
84 =item 9. WiFi tcpdump [need tcpdump on phone]
88 Please note that it will work also for FirefoxOS or other Android-based stuffs.
96 Print program arguments.
100 Print program version.
102 =item --extcap-version
104 Print extcapized version.
108 Print additional messages.
110 =item --extcap-interfaces
112 List available interfaces.
114 =item --extcap-interface=E<lt>interfaceE<gt>
116 Use specified interfaces.
120 List DLTs of specified interface.
122 =item --extcap-config
124 List configuration options of specified interface.
128 Start capturing from specified interface save saved it in place specified by --fifo.
130 =item --fifo=E<lt>path to file or pipeE<gt>
132 Save captured packet to file or send it through pipe.
134 =item --adb-server-ip=E<lt>IP addressE<gt>
136 Use other then default (127.0.0.1) ADB daemon's IP address.
138 =item --adb-server-tcp-port=E<lt>TCP portE<gt>
140 Use other then default (5037) ADB daemon's TCP port.
142 =item --logcat-text=E<lt>TRUE or FALSEE<gt>
144 If TRUE then use text logcat rather then binary. This option has effect only on
145 Logcat interfaces. This have no effect from Lollipop where is no binary Logcat
150 =item --bt-server-tcp-port=E<lt>TCP portE<gt>
152 Use other then default Bluetooth server TCP port on Android side.
153 On Lollipop defaults is 8872, earlier 4330.
155 =item --bt-forward-socket=E<lt>TRUE or FALSEE<gt>
157 If TRUE then socket from Android side is forwarded to host side.
161 =item --bt-local-ip=E<lt>IP addressE<gt>
163 Use other then default (127.0.0.1) IP address on host side for forwarded socket.
165 =item --bt-local-tcp-port=E<lt>TCP portE<gt>
167 Specify port to be used on host side for forwarded socket.
173 To see program arguments:
177 To see program version:
179 androiddump --version
183 androiddump --extcap-interfaces
186 interface {display=Android Logcat Main unknown MSM7627A}{value=android-logcat-main-MSM7627A}
187 interface {display=Android Logcat System unknown MSM7627A}{value=android-logcat-system-MSM7627A}
188 interface {display=Android Logcat Radio unknown MSM7627A}{value=android-logcat-radio-MSM7627A}
189 interface {display=Android Logcat Events unknown MSM7627A}{value=android-logcat-events-MSM7627A}
190 interface {display=Android Bluetooth Hcidump unknown MSM7627A}{value=android-bluetooth-hcidump-MSM7627A}
192 Human-readable display name of interfaces contains interface type, one of:
193 android-logcat-main (Android Logcat Main)
194 android-logcat-system (Android Logcat System)
195 android-logcat-radio (Android Logcat Radio)
196 android-logcat-events (Android Logcat Events)
197 android-logcat-text-main (Android Logcat Main)
198 android-logcat-text-system (Android Logcat System)
199 android-logcat-text-radio (Android Logcat Radio)
200 android-logcat-text-events (Android Logcat Events)
201 android-logcat-text-crash (Android Logcat Crash)
202 android-bluetooth-hcidump (Android Bluetooth Hcidump)
203 android-bluetooth-external-parser (Android Bluetooth External Parser)
204 android-bluetooth-btsnoop-net (Android Bluetooth Btsnoop Net)
205 android-wifi-tcpdump (Android WiFi)
206 Then Android Device's name if available, otherwise "unknown".
207 Last part of it is DeviceID - the identificator of the device provided by Android SDK (see "adb devices").
210 "Android Logcat Main unknown MSM7627A"
212 "Android Logcat Main" - user-friendly type of interface
213 "unknown" - name of Android Device
214 "MSM7627A" - device ID
216 To see interface DLTs:
218 androiddump --extcap-interface=android-bluetooth-hcidump-MSM7627A --extcap-dlts
221 dlt {number=99}{name=BluetoothH4}{display=Bluetooth HCI UART transport layer plus pseudo-header}
224 To see interface configuration options:
226 androiddump --extcap-interface=android-bluetooth-hcidump-MSM7627A --extcap-config
229 arg {number=0}{call=--adb-server-ip}{display=ADB Server IP Address}{type=string}{default=127.0.0.1}
230 arg {number=1}{call=--adb-server-tcp-port}{display=ADB Server TCP Port}{type=integer}{range=0,65535}{default=5037}
235 androiddump --extcap-interface=android-bluetooth-hcidump-MSM7627A --fifo=/tmp/bluetooth.pcapng --capture
237 NOTE: To stop capturing CTRL+C/kill/terminate application.
241 wireshark(1), tshark(1), dumpcap(1), extcap(4)
245 B<Androiddump> is part of the B<Wireshark> distribution. The latest version
246 of B<Wireshark> can be found at L<https://www.wireshark.org>.
248 HTML versions of the Wireshark project man pages are available at:
249 L<https://www.wireshark.org/docs/man-pages>.
255 Michal Labedzki <michal.labedzki[AT]tieto.com>
260 Roland Knall <rknall[AT]gmail.com>