1ANDROIDDUMP(1) ANDROIDDUMP(1)
2
3
4
6 androiddump - Provide interfaces to capture from Android devices
7
9 androiddump [ --help ] [ --version ] [ --extcap-version ] [ --debug ]
10 [ --extcap-interfaces ] [ --extcap-dlts ]
11 [ --extcap-interface=<interface> ] [ --extcap-config ] [ --capture ]
12 [ --fifo=<path to file or pipe> ] [ --adb-server-ip=<IP address> ]
13 [ --adb-server-tcp-port=<TCP port> ] [ --logcat-text=<TRUE or FALSE> ]
14 [ --bt-server-tcp-port=<TCP port> ]
15 [ --bt-forward-socket=<TRUE or FALSE> ] [ --bt-local-ip=<IP address> ]
16 [ --bt-local-tcp-port=<TCP port> ]
17
18 androiddump --extcap-interfaces [ --adb-server-ip=<IP address> ]
19 [ --adb-server-tcp-port=<TCP port> ]
20
21 androiddump --extcap-interface=<interface> [ --extcap-dlts ]
22
23 androiddump --extcap-interface=<interface> [ --extcap-config ]
24
25 androiddump --extcap-interface=<interface>
26 --fifo=<path to file or pipe> --capture
27
29 Androiddump is a extcap tool that provide interfaces to capture from
30 Android device. There is only two requirements:
31
32 1. You must have Android SDK and add it PATH environment variable.
33 PATH should contain directory with tools like "adb" and "android".
34 Android SDK for various platform are available on:
35 https://developer.android.com/sdk/index.html#Other
36
37 2. You must have permission to Android devices. Some Android devices
38 requires on-screen authentication.
39
40 Supported interfaces:
41
42 1. Logcat Main (binary [<=Jelly Bean] or text)
43
44 2. Logcat System (binary [<=Jelly Bean] or text)
45
46 3. Logcat Events (binary [<=Jelly Bean] or text)
47
48 4. Logcat Radio (binary [<=Jelly Bean] or text)
49
50 5. Logcat Crash (text; from Lollipop)
51
52 6. Bluetooth Hcidump [<=Jelly Bean]
53
54 7. Bluetooth Bluedroid External Parser [Kitkat]
55
56 8. Bluetooth BtsnoopNet [>=Lollipop]
57
58 9. WiFi tcpdump [need tcpdump on phone]
59
60 Please note that it will work also for FirefoxOS or other Android-based
61 stuffs.
62
64 --help
65
66 Print program arguments.
67
68 --version
69
70 Print program version.
71
72 --extcap-version
73
74 Print extcapized version.
75
76 --debug
77
78 Print additional messages.
79
80 --extcap-interfaces
81
82 List available interfaces.
83
84 --extcap-interface=<interface>
85
86 Use specified interfaces.
87
88 --extcap-dlts
89
90 List DLTs of specified interface.
91
92 --extcap-config
93
94 List configuration options of specified interface.
95
96 --capture
97
98 Start capturing from specified interface save saved it in place
99 specified by --fifo.
100
101 --fifo=<path to file or pipe>
102
103 Save captured packet to file or send it through pipe.
104
105 --adb-server-ip=<IP address>
106
107 Use other then default (127.0.0.1) ADB daemon’s IP address.
108
109 --adb-server-tcp-port=<TCP port>
110
111 Use other then default (5037) ADB daemon’s TCP port.
112
113 --logcat-text=<TRUE or FALSE>
114
115 If TRUE then use text logcat rather then binary. This option has
116 effect only on Logcat interfaces. This have no effect from Lollipop
117 where is no binary Logcat available.
118
119 Defaults to FALSE.
120
121 --bt-server-tcp-port=<TCP port>
122
123 Use other then default Bluetooth server TCP port on Android side.
124 On Lollipop defaults is 8872, earlier 4330.
125
126 --bt-forward-socket=<TRUE or FALSE>
127
128 If TRUE then socket from Android side is forwarded to host side.
129
130 Defaults to FALSE.
131
132 --bt-local-ip=<IP address>
133
134 Use other then default (127.0.0.1) IP address on host side for
135 forwarded socket.
136
137 --bt-local-tcp-port=<TCP port>
138
139 Specify port to be used on host side for forwarded socket.
140
142 To see program arguments:
143
144 androiddump --help
145
146 To see program version:
147
148 androiddump --version
149
150 To see interfaces:
151
152 androiddump --extcap-interfaces
153
154 Example output
155
156 interface {display=Android Logcat Main unknown MSM7627A}{value=android-logcat-main-MSM7627A}
157 interface {display=Android Logcat System unknown MSM7627A}{value=android-logcat-system-MSM7627A}
158 interface {display=Android Logcat Radio unknown MSM7627A}{value=android-logcat-radio-MSM7627A}
159 interface {display=Android Logcat Events unknown MSM7627A}{value=android-logcat-events-MSM7627A}
160 interface {display=Android Bluetooth Hcidump unknown MSM7627A}{value=android-bluetooth-hcidump-MSM7627A}
161
162 Human-readable display name of interfaces contains interface type, one of:
163 android-logcat-main (Android Logcat Main)
164 android-logcat-system (Android Logcat System)
165 android-logcat-radio (Android Logcat Radio)
166 android-logcat-events (Android Logcat Events)
167 android-logcat-text-main (Android Logcat Main)
168 android-logcat-text-system (Android Logcat System)
169 android-logcat-text-radio (Android Logcat Radio)
170 android-logcat-text-events (Android Logcat Events)
171 android-logcat-text-crash (Android Logcat Crash)
172 android-bluetooth-hcidump (Android Bluetooth Hcidump)
173 android-bluetooth-external-parser (Android Bluetooth External Parser)
174 android-bluetooth-btsnoop-net (Android Bluetooth Btsnoop Net)
175 android-wifi-tcpdump (Android WiFi)
176 Then Android Device's name if available, otherwise "unknown".
177 Last part of it is DeviceID - the identificator of the device provided by Android SDK (see "adb devices").
178
179 For example:
180 "Android Logcat Main unknown MSM7627A"
181
182 "Android Logcat Main" - user-friendly type of interface
183 "unknown" - name of Android Device
184 "MSM7627A" - device ID
185
186 To see interface DLTs:
187
188 androiddump --extcap-interface=android-bluetooth-hcidump-MSM7627A --extcap-dlts
189
190 Example output
191
192 dlt {number=99}{name=BluetoothH4}{display=Bluetooth HCI UART transport layer plus pseudo-header}
193
194 To see interface configuration options:
195
196 androiddump --extcap-interface=android-bluetooth-hcidump-MSM7627A --extcap-config
197
198 Example output
199
200 arg {number=0}{call=--adb-server-ip}{display=ADB Server IP Address}{type=string}{default=127.0.0.1}
201 arg {number=1}{call=--adb-server-tcp-port}{display=ADB Server TCP Port}{type=integer}{range=0,65535}{default=5037}
202
203 To capture:
204
205 androiddump --extcap-interface=android-bluetooth-hcidump-MSM7627A --fifo=/tmp/bluetooth.pcapng --capture
206
207 Note
208 To stop capturing CTRL+C/kill/terminate application.
209
211 wireshark(1), tshark(1), dumpcap(1), extcap(4)
212
214 Androiddump is part of the Wireshark distribution. The latest version
215 of Wireshark can be found at https://www.wireshark.org.
216
217 HTML versions of the Wireshark project man pages are available at
218 https://www.wireshark.org/docs/man-pages.
219
221 Original Author
222 Michal Labedzki <michal.labedzki[AT]tieto.com>
223
224 Contributors
225 Roland Knall <rknall[AT]gmail.com>
226
227
228
229 2022-02-16 ANDROIDDUMP(1)