[HOWTO] Capture network data and analyze with Wireshark

Download tcpdump
adb root
adb push tcpdump /data/
adb shell
cd /data/
chmod 755 tcpdump
./tcpdump -vv -i any -s 0 -w /sdcard/dump.pcap
CTRL+C after you’ve captured enough packets.
exit
exit
adb pull /sdcard/dump.pcap

now you have a dump.pcap and you can load this file into Wireshark and search for calls to Goolag.
source

Regain your privacy! Adopt /e/ the unGoogled mobile OS and online servicesphone

7 Likes

I’m not sure many people will find it beneficial, but it’s really very useful. Previously, I used to do this in real time by running an access point on my laptop (very inconvenient), but now it turns out there’s a better way. Thank you!

This is cool. Thank you for sharing.

Sean.