QCSuper:在高通手机猫上捕获无线2G/3G/4G数据包( 二 )


你发送的数据流量使用与信令流量不同的信道,此信道通过信令流量建立;因此,应向你显示与此信道相关的所有详细信息 。
使用
使用,你需要指定一个输入(例如:–adb(手机),–usb-modem)和一个或多个模块(–-live用于打开,–pcap-dump用于写入流量到PCAP文件,–info获取有关设备的一般信息…) 。
示例:天天好彩
# Open Wireshark directly, using a rooted Android phone as an input./qcsuper.py --adb --wireshark-live# Same, but dump to a PCAP file instead of opening Wireshark directly./qcsuper.py --adb --pcap-dump /tmp/my_pcap.pcap# Same, but using an USB modem exposing a Diag serial portsudo ./qcsuper.py --usb-modem /dev/ttyHS2 --wireshark-live
以下是当前所有可用选项:
usage: qcsuper.py [-h] [--cli] [-v](--adb | --usb-modem TTY_DEV | --dlf-read DLF_FILE | --json-geo-read JSON_FILE)[--info] [--pcap-dump PCAP_FILE] [--wireshark-live][--memory-dump OUTPUT_DIR] [--dlf-dump DLF_FILE][--json-geo-dump JSON_FILE] [--decoded-sibs-dump][--reassemble-sibs] [--decrypt-nas] [--include-ip-traffic][--start MEMORY_START] [--stop MEMORY_STOP]A tool for communicating with the Qualcomm DIAG protocol (also called QCDM orDM).optional arguments:-h, --helpshow this help message and exit--cliUse a command prompt, allowing for interactivecompletion of commands.-v, --verboseAdd output for each received or sent Diag packet.Input mode:Choose an one least input mode for DIAG data.--adbUse a rooted Android phone with USB debugging enabledas input (requires adb).--usb-modem TTY_DEVUse an USB modem exposing a DIAG pseudo-serial portthrough USB.--dlf-read DLF_FILERead a DLF file generated by QCSuper or QXDM, enablinginteroperability with vendor software.--json-geo-read JSON_FILERead a JSON file generated using --json-geo-dump.Modules:Modules writing to a file will append when it already exists, and considerit Gzipped if their name contains ".gz".--infoRead generic information about the baseband device.--pcap-dump PCAP_FILEGenerate a PCAP file containing GSMTAP frames for2G/3G/4G, to be loaded using Wireshark.--wireshark-liveSame as --pcap-dump, but directly spawn a Wiresharkinstance.--memory-dump OUTPUT_DIRDump the memory of the device (may not or partiallywork with recent devices).--dlf-dump DLF_FILEGenerate a DLF file to be loaded using QCSuper orQXDM, with network protocols logging.--json-geo-dump JSON_FILEGenerate a JSON file containing both raw log framesand GPS coordinates, for further reprocessing. To beused in combination with --adb.--decoded-sibs-dumpPrint decoded SIBs to stdout (experimental, requirespycrate).PCAP generation options:To be used along with --pcap-dump or --wireshark-live.--reassemble-sibsInclude reassembled UMTS SIBs as supplementary frames,also embedded fragmented in RRC frames.--decrypt-nasInclude unencrypted LTE NAS as supplementary frames,also embedded ciphered in RRC frames.--include-ip-trafficInclude unframed IP traffic from the UE.Memory dumping options:To be used along with --memory-dump.--start MEMORY_STARTOffset at which to start to dump memory (hex number),by default 00000000.--stop MEMORY_STOPOffset at which to stop to dump memory (hex number),by default ffffffff.
指定 – 支持来自stdin或的管道数据输送(可能无法检测到gzip压缩的内容) 。
使用(USB猫)
你可以将与USB猫一起使用–usb-modem 选项暴露Diag端口,其中是Linux上伪串行设备(如/dev/,/dev/和其他可能的设备)或上的COM端口(例如COM3)的名称 。
注意,在大多数设置中,你需要以root用户身份运行才能使用此模式,尤其是处理串口干扰问题 。
如果你不清楚/dev下哪些设备暴露了Diag端口,你可能需要对其中的设备进行逐一的尝试 。你可以尝试通过停止守护进程(sudostop )并使用以下命令来自动检测:sudo–debug 2>&1 | grep -i ‘port is QCDM-’ 然后使用Ctrl-C 。
注意,如果你的设备不能与一起使用,那么它很可能没有进行完全的设置,并且也不能与一起使用 。一些可能的问题是