从Android 12下载BTSNOOP_HCI 12

发布于 2025-01-26 03:08:40 字数 709 浏览 4 评论 0原文

我正在尝试提取和分析来自Android 12 STB的流量,以验证某些操作(例如Key Press等)。 我遇到了两种方法:

  • 下载整个BugReport(adb bugreport< file_name>),解压缩输出,然后从“ FS/DATA/MISC/BLUETOOTH/LOOGS”路径中提取BTSNOOP_HCI.LOG。 或
  • 使用'adb shell dumpsys bluetooth_manager'

秒方法给出了基本64编码的btsnoop_log_summary。尽管我能够解码摘要,但它似乎仅包含摘要,而不包含完整的BLE数据交换。 第一个方法(BugReport)确实提供了所有必要数据的完整PCAP文件(BTSNOOP_HCI.LOG),但是BugReport生成和下载过程非常耗时。

是否可以从Android 12中下载BTSNOOP_HCI.LOG,例如指示BugReport仅提取选择性文件? 或者,是否可以请求“ ADB Shell Dumpsys Bluetooth_manager”来倾倒所有BLE流量,而不仅仅是摘要?

另外,在Android 10上,我能够通过将设备挂接到Wireshark的Androiddump实用程序来监视/捕获实时BLE流量。但是,此功能似乎在Android 12上不可用(开发人员选项和HCI Snoop日志已在设备上启用)。是否知道此功能在Android 12上仍然可以访问(例如,它们是否更改了默认套接字地址或其他内容)?

I am trying to extract and analyse BLE traffic from an Android 12 STB to validate certain operations like key press etc.
I came across two methods:

  • Download the entire bugreport (adb bugreport <file_name>), unzip the output and extract the btsnoop_hci.log from "FS/data/misc/bluetooth/logs" path.
    or
  • Use the 'adb shell dumpsys bluetooth_manager'

The seconds method gives a base64 encoded BTSNOOP_LOG_SUMMARY. Though I am able to decode the summary, it seems to just contain only a summary and not the complete BLE data exchange.
The first method (bugreport) does provide a complete pcap file (btsnoop_hci.log) with all the necessary data, but the bugreport generation and download process is very time consuming.

Is there an easier way to download just the btsnoop_hci.log from Android 12, like instruct bugreport to extract only selective files?
Or, is it possible to request "adb shell dumpsys bluetooth_manager" to dump all the BLE traffic instead of just the summary?

Also, on Android 10 I was able to monitor/capture live BLE traffic by remotely hooking the device to the androiddump utility of wireshark. But this feature seems to be not available on Android 12 (developer option and HCI snoop log are already enabled on the device). Any idea if this feature is still accessible on Android 12 (like, did they change the default socket address or something) ?

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文