1

I was thinking about capturing iPhone traffic.

I have created a hosted network to which I can connect my iPhone. I'm able to filter the traffic for server IP addresses which are known, such as Google, Facebook etc. (ping <address>)

The problem is that I have to monitor the ethernet connection on my PC, and my PC gets a lot of background ethernet actions. Is it somehow possible to just display the activity from the hosted network?

P.S.: The IP address from which the packages my iPhone sends is the same as my PC's IP address.

Improve this question
3
  • 1
    Can you explain "the packages my iPhone sends is the same as my PC's IP address" a little better? That doesn't make sense to me.
    – Ron Trunk
    Mar 16, 2016 at 14:10
  • maybe you can try this approach setup a proxy server on your PC and enter this proxy servers data on your iPhone then capture the traffic data of the proxy server like it is mentioned in the iOS Developer Documentation developer.apple.com/library/content/qa/qa1176/_index.html
    – konqui
    Apr 12, 2017 at 7:18
  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin ♦
    Aug 9, 2017 at 2:10

1 Answer 1

Reset to default
0

According to: https://msdn.microsoft.com/en-us/library/windows/desktop/dd815243%28v=vs.85%29.aspx

Wireless Hosted Networking creates virtual wireless adapters, including a SoftAP adapter.

If that adapter shows up in the list of interfaces Wireshark can capture on, choosing the SoftAP adapter instead of the adapter your computer uses for it's Internet connection should narrow down what packets you see and let you see the iPhone's Wi-Fi IP and MAC addresses, which will both be different from your computer's addresses. If you've been capturing on the hosting computer's Internet-facing interface, you're probably seeing the iPhone's traffic after it gets NATed to the same IP and MAC addresses as your computer.

Once you switch which interface you're capturing on, you can filter by the MAC address of your iPhone:

https://ask.wireshark.org/questions/14368/capture-filter-mac

You can find an iPhone's Wi-Fi MAC address in:
Settings: General: About
under "Wi-Fi Address"

You can also filter on the IP address of the iPhone. If you can't figure that address out with a short capture on the AP interface, you can find it by tapping the blue-circled "i" next to the SSID (network name) of your hosted Wi-Fi in Settings: Wi-Fi.

Improve this answer
1
  • The MSDN link you provide is broken, and the MSDN site returns, "We're sorry, the page you requested cannot be found. The URL might be misspelled, or the page you're looking for is no longer available."
    – Ron Maupin ♦
    Mar 16, 2016 at 15:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.