However, the packet captures on Wireshark tool for rvi0 interface do
not show any ARP packets. Why is this happening?
Yesterday I ran your question past the RVI engineers to make sure there wasn’t some problem I was unaware of. To the best of our knowledge RVI should be able to capture ARP packets. The only obvious gotchas is that ARP is not used on some interfaces, most notably WWAN. However, if RVI is not seeing ARP traffic on an Ethernet-like interface, that’s something that warrants further investigation.
Some questions:
-
What version of iOS are you testing this on?
-
What version of macOS?
-
What version of Xcode do you have installed?
-
Are you looking for ARP traffic on the Wi-Fi interface? Or some other Ethernet-like interface?
I used the tcpdump
command … while I was able to see some request
packets, the response packets were not visible, why is this happening?
That’s definitely weird. I would not expect to see a difference between Wireshark and tcpdump
.
Is there some other mechanism to capture ARP traffic from iphone?
No.
Can third-party apps capture arp traffic/arp table using any Apple API?
On the iPhone, itself? No.
On the Mac? Assuming RVI is set up, you can use standard packet capture APIs against the RVI interface, so BPF and libpcap.
Can someone pls reply to this queries?
Please see tip 3.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"