Wireshark not detec...
 
Notifications
Clear all

Wireshark not detecting most Blackberry Packets

5 Posts
4 Users
0 Reactions
517 Views
(@rotus)
New Member
Joined: 16 years ago
Posts: 1
Topic starter  

Hi all. I'm new here… Stumbled on this forum while searching for some info and I made sure to search thru the forum but couldnt find what I'm looking for. Been doing some personal research on some apps I installed on my blackberry and wanted to make sure I know what kind of information is being exchanged with the app server.
I'm using Wireshark and made sure to turn off all other radio services on the blackberry so it connects to the app server using only my wireless network which I'm running Wireshark against.
The problem is I see enough packets to know that Wireshark is seeing blackberry but thats about it. I use the internet, web applications and check emails using the blackberry wifi but nothing shows up on Wireshark.
What am I missing? Is there a special encryption type in use? I'm normally able to tell when VPN and other encryption is in use on regular workstations but the blackberry is proving to be much different.
Any hunches? Advice?


   
Quote
(@indur)
Trusted Member
Joined: 17 years ago
Posts: 67
 

It shouldn't be anything Blackberry-specific. There's nothing the device can do to make the packets it sends not be detected by pcap (Wireshark). Probably the only packets you are seeing are broadcast packets, and your network setup is not such that one device can see packets that are directed to the other device. (For example, if the two devices were on a wired network connected by a switch.)


   
ReplyQuote
(@usedtire)
New Member
Joined: 16 years ago
Posts: 2
 

I've not done much with blackberry's on wifi, but it may be the same as a blackberry on the Cell/Radio signal. In that the blackberry doesn't hold an IP per-say it uses it's PIN to communicate back to the RIM server and then the RIM server translates it to an IP address.

What I would recommend is using the web browsing function and find a website that will ID your IP. That should tell you if it's mapped to your IP or the RIM IP.

Good Luck.


   
ReplyQuote
(@burratha)
Eminent Member
Joined: 18 years ago
Posts: 43
 

It would need to communicate using TCP/IP surely - otherwise how would it communicate with your wireless router??


   
ReplyQuote
(@usedtire)
New Member
Joined: 16 years ago
Posts: 2
 

I would assume that if he was on Wifi that he has an IP address. I was just wondering if it was still using the radio to communicate with the RIM server. He may want to try disabling the radio and then try the wifi. not sure if because RIM prefers everything to go through their proprietary server that they haven't forced the use of Radio over wifi.


   
ReplyQuote
Share: