Today, we are proud to present QCSuper, an open-source tool that will enable you to passively capture raw 2G/3G/4G frames produced by your rooted Qualcomm-based Android phone or dongle, and produce a PCAP analyzable using Wireshark (in addition to a couple other input/output formats). Let’s say that you have a rooted Android phone (this is required for reading /dev/diag on the system), plugged in USB to your computer, and that you have downloaded QCSuper (and installed dependencies, everything is explained here). You could just run the tool and try to make sense of the displayed information, but for the sake of pedagogy, let’s first analyze some traffic together!ĭownload the example 2G/3G/4G capture (.pcap) You can see radio frames unfolding on your screen, and you are like Neo. This capture was realized on a Sony Xperia Z, switching manually between the 2G, 3G and 4G, generating SMS, calls and some data traffic. “this chunk of radio waves is not big enough for the bytes I’ll want to put into, I’ll use another later”), Layer 2 ( link layer, think like Ethernet header) is the network protocol that handles, in 3G/4G.Layer 1 ( physical layer) is the way your phone schedules how radio waves are sent over the air (and it is a complex dance, as some neat tricks are required to optimize the usage of the radio spectrum).What QCSuper provides to you is layer 3 and above packets.
0 kommentar(er)
