I'm trying to do examine some apps and what kind of network traffic they're using on my iPhone.

I've set up Charles (including SSL certificates & provisioning profiles). Then, I tethered my laptop to my iPad to get a connection, and then shared that internet with my iPhone via WiFi.

For some reason, the apps I'm working with seem to think that they're not online. Safari works with this set up.

What are my options for seamlessly sending network traffic to a Mac for analysis, without jailbreaking?

If it matters, I'm running iOS 5.1 on an iPhone 4 and Mac OS X Lion on the white plastic unibody (Mid-2010) MacBook.

  • 1
    Have you heard of Ettercap? I use it cough daily cough. It's MITM at its finest. I'll write a nice answer about it if you'd like to hear more. Based on what you've described (and based on that article), it should do what you want. Commented Apr 16, 2012 at 19:19
  • Please do write about it. :-)
    – Moshe
    Commented Apr 16, 2012 at 19:30
  • so do they have a connection when you don't have Charles running? And your iPad is the one providing the internet conenction over USB?
    – Jonathan.
    Commented Apr 17, 2012 at 15:41
  • Old question, I know. The problem is SSL. The iOS applications are refusing to connect without a valid SSL certificate. Commented Dec 17, 2013 at 23:36

3 Answers 3


Use mitmproxy. It's proven for this sort of thing. A while back there was some uproar about the app Path uploading the adressbook to its servers. This was what was used to discover it. The guy wrote up how he used it and that's a nice intro on how to install and use mitmproxy.

enter image description here

From the site :

mitmproxy is an SSL-capable man-in-the-middle HTTP proxy. It provides a console interface that allows traffic flows to be inspected and edited on the fly.

mitmdump is the command-line version of mitmproxy, with the same functionality but without the frills. Think tcpdump for HTTP. Features

  • Intercept and modify HTTP traffic on the fly
  • Save HTTP conversations for later replay and analysis
  • Replay both HTTP clients and servers
  • Make scripted changes to HTTP traffic using Python
  • SSL interception certs generated on the fly

While connected to the same Wifi, won't WireShark do exactly what you want?

Extracted from WireShark's documentation page

1.1.2. Features

The following are some of the many features Wireshark provides:

  • Available for UNIX and Windows.
  • Capture live packet data from a network interface.
  • Display packets with very detailed protocol information.
  • Open and Save packet data captured.
  • Import and Export packet data from and to a lot of other capture programs.
  • Filter packets on many criteria.
  • Search for packets on many criteria.
  • Colorize packet display based on filters.
  • Create various statistics.

... and a lot more!

  • Hrm... Maybe... Except I can't send spoofed network traffic to my iOS device, can I?
    – Moshe
    Commented Apr 12, 2012 at 14:37
  • I guess not. As It's said in the Documentation Page: "Wireshark will not manipulate things on the network, it will only "measure" things from it. Wireshark doesn't send packets on the network or do other active things (except for name resolutions, but even that can be disabled)."
    – Thecafremo
    Commented Apr 12, 2012 at 15:16
  • Well, it's still a start, for examining what the app is expecting.
    – Moshe
    Commented Apr 12, 2012 at 15:24
  • WireShark is good for your purpose.
    – revolver
    Commented Apr 12, 2012 at 15:42

Debookee is a network traffic analyzer such as Wireshark, but it can also intercept the network traffic of any device on your network.

Simply scan your network, you'll see all devices, select your iPhone as a Target, launch the analyzer and you will see all the traffic of your iPhone, without need of jailbreak or tethering.

The protocols shown are: HTTP, HTTPS, DHCP, DNS, TCP, SIP ...

  • 1
    Please read apple.stackexchange.com/faq#promotion before promoting your own product.
    – nohillside
    Commented Dec 2, 2012 at 10:58
  • Debokee is a great app and is a lot more seamless to setup and monitor traffic on OSX compared many of the more elaborate schemes and tools recommended. There's no reason for this to be downvoted. Commented May 31, 2014 at 12:14

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .