Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I run an application on Android phone.

The application connects to a webservice via internet and I want to intercept the traffic between the application and the webservice.

The connection is http/ssl

I don't own the webservice server.

If I use tcpdump I cannot see the ssl traffic . It looks broken/encrypted.
share|improve this question
I have absolutely no idea what you're asking. Of course tcpdump "supports" SSL; it's L7-agnostic, and of course you can get "SSL TCP" packets on Android, HTTPS works just fine. Please rewrite your question to be clear and answerable, preferably with a description of the problem you're trying to solve, rather than just starting to type part-way through your problem-solving thought processes. Also, your vote and accept rates could do with some work (nudge) – womble Jul 31 '11 at 1:46
ok. I just edited the question – Michael Jul 31 '11 at 7:31
Now that's a question that can be answered. – womble Jul 31 '11 at 7:43
up vote 1 down vote accepted

Without the SSL private key, dumping the traffic at any point isn't going to be fruitful. All you can do is trace the execution of the application on the phone (for which you'll need a jailbroken phone) to see what it's doing. Even then, it's not just a matter of tracing the write calls, you need to trace the calls to the SSL encryption routines. It's not trivial.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.