yashsingh1/xdaforums huggingface dataset:
[Android Software Development] alex2308:
My first tests seem to work. You are finding the bug, fixing the bug and pushing a new package within 70 minutes ... amazing!! :)
[Android Software Development] SandroBSupp:
Kudos to you too. Appreciate any feedback and observations.
[Android Software Development] SandroBSupp:
New feature: non intercepting proxy

Proxy has now new mode that do not intercept data.

It just forwards further.

But there is still feature to connect to another proxy.

This is convenient for users behind corporate firewalls/proxies

that do not want that traffic is captured.

http://code.google.com/p/sandrop/issues/detail?id=65
[Android Software Development] djtreo:
This may sound noobish, but I'll ask anyway.

We got a squid proxy setup in our network (windows with ntlm authentication), already set SandroProxy to our settings like 10.xx.xx.xx:8080 and authentication to our domain\myusername & password provided.

Now, how to set the browser (I'm using Dolphin) to actually see my proxy settings set in SandroProxy? Just like in IE or FF in our desktops..

Appreciate your comments as I'm stuck on this. :P
[Android Software Development] SandroBSupp:
Go to Android OS Settings->Wifi. Long click on active wifi connection. Menu will appear. Choose Modify network.

On the bottom there is option Advanced settings. Set proxy to manual, localhost 8008.

Start SandroProxy.

This will work if you have android 4.x

It can be done also other ways.
[Android Software Development] djtreo:
Thanks a lot! Didn't saw that. I can browse the web now. Another stupid question, why the browser gives me 'error on network' error every now and then? while my laptop seems to connect without issues at all at the same time and wifi connection
[Android Software Development] SandroBSupp:
Do you have the latest version of SandroProxy? It should be 1.4.64.

If you give me more details on your network configuration, (Squid version, android os, ... ), I can look if there is still some bugs.

Please try also with other programs. Facebook, Google+, Google Play, ...
[Android Software Development] djtreo:
Sorry for not being detailed on my previous post. But here it is anyway:

- Yes, I got your latest version of SandroProxy 1.4.64

- Our company proxy server running on Cent OS 5.5; Squid version 2.6

- Windows Domain; Server running on Win 2008 Advance server; NTLM setup

- My phone is a LG SU660 (Korean version of LG Optimus 2X) running stock ICS (4.0.4; 2.6.39.4)

- FB, file sharing and video streaming sites are blocked

- Can access G+ and Google Play using SandroProxy but have inconsistencies; laptop does not have that problem connecting

Is this enough?
[Android Software Development] SandroBSupp:
Sorry, I missed that you already state that have 1.4.64.

I will check squid<->android configuration more firmly if I can find any problems.

And SandroProxy version is 1.4.64? Previous (1.4.62) has exactly the problems that you describe.
[Android Software Development] SandroBSupp:
Maybe you will find SandroProxy mode that capture data (developers mode) more stable.

But then you must put SandroProxy CA certificate in OS store:

Log tab->Menu->Export CA certificate.
[Android Software Development] djtreo:
Yep, apk file states 1.4.64 version..

I'll be subscribing this thread. Thanks a lot for the prompt response.

---------- Post added at 04:11 PM ---------- Previous post was at 04:07 PM ----------

I tried exporting CA to store, but it'll ask a certificate name...don't have any idea on this one sorry.
[Android Software Development] SandroBSupp:
Just put anything you like. For example sandroproxy-ca.

http://nelenkov.blogspot.com/2011/11/using-ics-keychain-api.html
[Android Software Development] djtreo:
Same issue. SandroProxy displayed an error message on browser saying error connecting on proxy after 3000ms?
[Android Software Development] SandroBSupp:
I will try to setup similar enviroment.

SandroProxy was tested with ISA proxy (ntlm auth), squid proxy (basic, digest auth).

I will set up ubuntu/squid with ntlm_auth module and test it. Will let you know results.
[Android Software Development] djtreo:
Thanks a lot! Awaiting for your test results...
[Android Software Development] SandroBSupp:
Joy of setting squid with ntlm support :). ubuntu 12.04, squid 3.1.19

http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm

But I tested and it is working quite well.

So it must be something with yours squid restrictions.

SandroProxy probably makes more connections that browser.

http://wiki.squid-cache.org/SquidFaq/SquidAcl#Can_I_limit_the_number_of_connections_from_a_client.3F

Maybe problem is also that SandroProxy request, that is not allowed by squid, is not dropped, but it timeouts after 30 seconds.

If you want, you can send me more data by mail (adb logcat, log tab copy) to figure out what could be wrong.
[Android Software Development] alex2308:
Proxy chaining with ntlm has many possible problem sources. You would need a dump to see the problem. For example a client trying to open a site getting 407 or 401 HTTP codes at first (because of ntlm) and only in 3rd request getting a 200.
[Android Software Development] SandroBSupp:
Yes, those 407/401 can be quite a challenge.

http://code.google.com/p/sandrop/source/browse/projects/SandroProxyLib/src/org/sandrop/webscarab/httpclient/URLFetcher.java

But if this is the case some combination would never work.
[Android Software Development] djtreo:
I'll send a logcat or something. I'm in the middle of a very busy day with meetings in between. And as alex posted, I also got that 407 authentication needed error with those java i dont know what that is :D
[Android Software Development] SandroBSupp:
New feature: transparent ssl hostname resolver

In transparent SSL mode SandroProxy acts different now (version 1.4.65) .

It tries to find out what server certificate should be. So there is no need to have hardcoded value (sandroproxy.untrusted).

Hardcoded is used only if it fails as certificate hostname resolver.

http://code.google.com/p/sandrop/issues/detail?id=69
[Android Software Development] SandroBSupp:
New feature: client info collected and shown in chrome devtool network tab

If local application name is retrieved, namespace is displayed, if from outside tcp/ip. And socket port.

http://code.google.com/p/sandrop/issues/detail?id=70
[Android Software Development] SandroBSupp:
New feature: start/stop if android os wifi settings has proxy set

SandroProxy will start/stop is android os wifi has settings on localhost:sandroproxy_port

http://code.google.com/p/sandrop/issues/detail?id=72
[Android Software Development] SandroBSupp:
New feature: chrome devtools tab for device tcp connections

http://code.google.com/p/sandrop/issues/detail?id=76
[Android Software Development] jjlwork:
usage question

How can I get this app to replay the following request a specified number of times:

Reading the response

Request :

POST http://vs-fb-mobile-p1.playtika.com:80/VSServer/Game HTTP/1.1

Host: vs-fb-mobile-p1.playtika.com

Accept-Encoding: deflate, gzip

Cookie: JSESSIONID=5E0BE8A8B7B2BD78A06B53CBEC347133

Accept: text/xml, application/xml, application/xhtml+xml, text/html;q=0.9, text/plain;q=0.8, text/css, image/png, image/jpeg, image/gif;q=0.8, application/x-shockwave-flash, video/mp4;q=0.9, flv-application/octet-stream;q=0.8, video/x-flv;q=0.7, audio/mp4, application/futuresplash, */*;q=0.5

User-Agent: Mozilla/5.0 (Android; U; en-US) AppleWebKit/533.19.4 (KHTML, like Gecko) AdobeAIR/3.3

x-flash-version: 11,3,300,257

Connection: Keep-Alive

Cache-Control: no-cache

Referer: app:/VideoSlots.swf

Content-Type: application/x-www-form-urlencoded; charset=utf-8

Content-Length: 181

cmd=SPIN&ignore=0&user%5Fid=1513252885#####&lines%5Fcount=99&accept%5Frb=false&game%5Fid=48&bet%5Fid=5&computer%5Fguid=755225940%5F69256509&session%5Fid=141137103268####&cheat%5Fid=0
[Android Software Development] SandroBSupp:
To capture traffic you should select Capture data in Settings. Restart proxy.

Then http data will be also in HTTP tab.

In HTTP tab long click on request.

Context menu will appear. Select Manual Request.

New activitiy will open where you can resend request as you like.
[Android Software Development] SandroBSupp:
New feature: setting to specify local domain name

There is setting to state local domain name.

This is used if dns fail to resolve name.

Another attempt is made with host.domain name. Result is cached.

android bug:

http://code.google.com/p/android/issues/detail?id=8030

sandroproxy issue:

http://code.google.com/p/sandrop/issues/detail?id=81
[Android Software Development] ZoldarVL:
Awesome app. Really helped my out because I needed access to a proxy with authentication at work.

One question: It works fine on most of the apps I have, but it doesn't work for whatsapp. This is not a big deal but maybe I have to change some of my settings for this to work with whatsapp?

Help is much appreciated.
[Android Software Development] SandroBSupp:
Thanks. If you need just proxy authentication you can also use Drony. Much smaller and lightweight.

https://play.google.com/store/apps/details?id=org.sandroproxy.drony

About WhatsApp working with SandroProxy/Drony . I looked once and it seems that is not respecting android os proxy settings.

If you have rooted phone maybe some tweaks can be done to make it work.
[Android Software Development] ZoldarVL:
Thanks a lot I'll give drony a go.
[Android Software Development] ZoldarVL:
Tried drony this morning. Used the chain proxy setting with the same credentials I used in SandroProxy. But unfortunately it gives a proxy authentication error:

From the drony log

"Got proxy response 407 proxy Authentication Required (

The ISA server requires authorization to fullfill the request. Access to the Web Proxy filter is denied. )"

I switched back to SandroProxy and with the same credentials this works ok.

[MENTION=4274518]SandroBSupp[/MENTION]: Any tips?
[Android Software Development] SandroBSupp:
It should work.

It logs this errors because there are 3 request/responses before windows proxy authentication is done.

It is the same with SandroProxy, you can check log there.

Maybe you mistype domain\username or password.

But if you are satisfied with SandroProxy you can stick with it. It works the same.
[Android Software Development] ZoldarVL:
I tried it again and now when I go to my browser it asks me to login to localhost:8020. Not sure what to do next.
[Android Software Development] SandroBSupp:
Tried again with version from google Play on my isa proxy servers and it works okey.

if your are asked from browser for credentials, something is wrong with the one stated in Drony.

Settings looks like:
[Android Software Development] ZoldarVL:
Thats what I thought also, copy/paste my setting from SandroProxy to Drony. Typed in the pw very carefully. But it's not working :(. Since SandroProxy is working I'll stick to that for a while. Maybe when Drony has a new release I can try it again, because I like the lightweight part ;)
[Android Software Development] SandroBSupp:
Ok. I will let you know if I find some differences.
[Android Software Development] SandroBSupp:
New feature: chrome devtools console tab acting as android shell

New features in version 1.4.77
[Android Software Development] byluis:
Drony and Whatsapp

Thank you very much, you did an outstanding piece of software ...

What kind of tweaks to work with Whatsapp are you talking about? I'm very interested in this point ...
[Android Software Development] SandroBSupp:
http://code.google.com/p/sandrop/issues/detail?id=83

Please let me know if it works for you.
[Android Software Development] jefbeck:
help me please. i can not download on google play or update my apps. also i can not use skype. all apps can conect to web but not working properly like video not loading on youtube and stuffs like that. our proxy is 192.168.35.132 port 3218. actually its a pac but as intructed here, i follow everything and it work but those problems exist.
[Android Software Development] SandroBSupp:
For YouTube you will need rooted phone. In app tab you redirect all traffic to SandroProxy.

http://code.google.com/p/sandrop/issues/detail?id=83

If you have pac files you should check also Drony.

https://play.google.com/store/apps/details?id=org.sandroproxy.drony
[Android Software Development] jefbeck:
man, still nothing. still the same. btw, drony not working. no settings to enter pac file.

i can log in or sign in to almost all social site, but viber cant.

also, google play and any app store is not downloading but connecting.
[Android Software Development] SandroBSupp:
You can send me what is on log tab and logcat to find out what could be wrong.

About Drony and setting pac script:

Settings->WiFi->Select WiFi to change ->Script(Edit proxy script)->location of script url

Activate download button from action menu, test it, save it

Change proxy type (None,Manual,Script) to Script

Restart Drony

http://code.google.com/p/sandrop/wiki/HowToUseDronyWithOtherProxy
[Android Software Development] Sapiem:
About Drony and SandroProxy

I can't install drony in my cel (MIUIes 2.3.7)

I try SandroProxy but I don't know how can I configure it. I only need connect my cel to a server with proxy 192.168.41.1:8080

Please, where can I found the steps for that

Thanks...
[Android Software Development] SandroBSupp:
Yes, Drony works only on 3.x or higher.

On 2.3.X you will need SandroProxy and rooted phone.

1. Go to APPS tab and select that all http(80), https(443) and 5228, 5222 should be redirected.

2. enable transparent proxy in settings

3. enable chain proxy in settings and set also chain proxy (your cel proxy) data

4. start proxy
[Android Software Development] SandroBSupp:
Look that all went okey... What could be wrong:

1. Please install latest version and redirect all traffic with first two options on APPS tab. Looks to me that you do not have latest.

2. You should also fill data for HTTPS chain proxy. Probably same as for HTTP chain proxy

3. Check that some other application is not making some iptables rules that somehow prevails on SandroProxy's ones.

iptables -L and iptables -t NAT -L

4. Maybe your kernel do not support iptables redirections.
[Android Software Development] SandroBSupp:
After you run SandroProxy chains should not be empty. They should have some new sandroproxy chains.

Maybe also some android os monitoring app is messing with network configuration.

They can be very aggressive and they can monitor iptables rules and change them so if some rules prevails on theirs,

they will force rules, clean iptables so they can collect data.

So you should really check what kind of apps you have running and stop/uninstall all that could mess with your system.
[Android Software Development] Sapiem:
No, sorry, iptables are ampty before SandroProxy start. After it's running or activated, these are the iptables chains...

# su

su

# iptables -V

iptables v1.4.7

# iptables -L

iptables -L

Chain INPUT (policy ACCEPT)

target prot opt source destination

sandroproxy all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)

target prot opt source destination

Chain OUTPUT (policy ACCEPT)

target prot opt source destination

Chain sandroproxy (1 references)

target prot opt source destination

FIX ME! implement getprotobynumber() bionic/libc/bionic/stubs.c:384

ACCEPT tcp -- anywhere anywhere tcp dpt:www

FIX ME! implement getprotobynumber() bionic/libc/bionic/stubs.c:384

ACCEPT tcp -- anywhere anywhere tcp dpt:https

#

# iptables -t nat -L

iptables -t nat -L

Chain PREROUTING (policy ACCEPT)

target prot opt source destination

sandroproxy all -- anywhere anywhere

Chain INPUT (policy ACCEPT)

target prot opt source destination

Chain OUTPUT (policy ACCEPT)

target prot opt source destination

sandrop_proc all -- anywhere anywhere

Chain POSTROUTING (policy ACCEPT)

target prot opt source destination

Chain sandrop_proc (1 references)

target prot opt source destination

FIX ME! implement getprotobynumber() bionic/libc/bionic/stubs.c:384

DNAT tcp -- anywhere anywhere ! owner UID match app_106 tcp dpt:www to:127.0.0.1:8009

FIX ME! implement getprotobynumber() bionic/libc/bionic/stubs.c:384

DNAT tcp -- anywhere anywhere ! owner UID match app_106 tcp dpt:https to:127.0.0.1:8010

Chain sandroproxy (1 references)

target prot opt source destination

FIX ME! implement getprotobynumber() bionic/libc/bionic/stubs.c:384

REDIRECT tcp -- anywhere anywhere tcp dpt:www redir ports 8009

FIX ME! implement getprotobynumber() bionic/libc/bionic/stubs.c:384

REDIRECT tcp -- anywhere anywhere tcp dpt:https redir ports 8010

#

OSMonitor apk show this log in the Connection TAB

TCP 127.0.0.1:5037 0.0.0.0:0 LISTEN

TCP6 127.0.0.1:8008 0.0.0.0:0 LISTEN

TCP6 127.0.0.1:8009 0.0.0.0:0 LISTEN

TCP6 127.0.0.1:8010 0.0.0.0:0 LISTEN

TCP6 0.0.0.0:8021 0.0.0.0:0 LISTEN

TCP6 0.0.0.0:8888 0.0.0.0:0 LISTEN

TCP6 0.0.0.0:8889 0.0.0.0:0 LISTEN

TCP6 0.0.0.0:8890 0.0.0.0:0 LISTEN

TCP6 192.168.41.101:8889 192.168.41.1:55625 ESTABLISHED

UDP 0.0.0.0:13010 0.0.0.0:0

UDP6 0.0.0.0:35947 0.0.0.0:0 CLOSE
[Android Software Development] SandroBSupp:
All looks okey. There are just sandroproxy rules nothing else that could prevail.

Is then anything logged new on LOG tab after you start android browser for example?

Maybe some app is blocking this iptables redirection in some other way...

You have some app listening also on ports 8021, 8888, 8889, 8890?

Maybe you should stop this just to test if it makes any difference.
[Android Software Development] Sapiem:
No, the SandroProxy log not change even after open the US browser....

How can I know if other apk is running and listening this ports...?

The OSMonitor apk log that I put before don't show that....?
[Android Software Development] SandroBSupp:
If nothing in log something is really messing with your android os network.

To find out who is listening on ports you can also use SandroProxy :)

http://code.google.com/p/sandrop/issues/detail?id=76

1. Go to HTTP tab and pres play button on acction bar

SandroProxy will listen on two new ports 8020 -> web , 8021 -> websockets for chrome devtools

2. start chrome from PC with url http://<your_device_ip>:8020

3. Check Connection tab, sort by state LISTEN, last two columns are process uid and names(can be more than one)
[Android Software Development] Sapiem:
This is the result when I click even Realtime or Stored data buttons...

Detached from the target

remote debugging has been terminated with reason: websocket_closed

Please re-attach to the new target
[Android Software Development] SandroBSupp:
I should warn you before. Because some other app is already listening on port 8021,

you should change where SandroProxy port for chrome devtools is.

LOG tab -> Settings -> Web socket server port => change from 8021 to 8025 for example.

HTTP tab -> Stop/Start SandroProxy Web

Sorry for late response. Been quite busy.
[Android Software Development] Sapiem:
This is the report...(look screenshot)

Only sandroproxy I see... even if I open others app like UC Browser....

I hope you find the problem, it will help a lot of people. I don't know what to do...

please could you write directtly to this email: villa(at)infomed.sld.cu ?

I'll be without full internet access until monday, but can work with limited connection

Thanks
[Android Software Development] SandroBSupp:
Well, what can I say. All looks very regular to me.

Even those listening ports from before are not shown.

What you should try is maybe to backup your ROM and start with fresh copy.

Without all programs that you installed. Just that phone is rooted and SandroProxy.
[Android Software Development] Sapiem:
I did that a lot of time with ProxyDroid, flashing CyanogenMOD and MIUIes too. But not with SandroProxy.. Today I'll do that and say you the results...

Which recovery do you recommend to me... I use ClockWorkMOD but it have problem with ext partitions. I can use Amon-RA too.

Thanks for all....
[Android Software Development] SandroBSupp:
Try with one that worked for you before this problems.

I use mainly cyanogen and they works okey with SandroProxy.

If you prefer to have conversations on mail just send me mail on supp.sandrob@gmail.com
[Android Software Development] Sapiem:
SandroProxy WORKSSSS

Hello:

Since march I had problems with proxy connections.. Now, after a lot mails, SandroProxy Team resolve my problems..

The Best..

Thanks for all effort

:victory::good:;)
[Android Software Development] bonanza123:
Hey,

I have some problems with capturing and monitoring for example traffic from whatsapp. My log looks like:

ConnectionHandler got an error : java.lang.NullPointerException

!!Error Check if client trust SandroProxy CA certificate or ignore on ws:// protocol

Finished negotiating SSL - algorithm is SSL_NULL_WITH_NULL_NULL

Generating custom SSL keystore for *.whatsapp.net

Connect to 50.22.231.42:443

Opening a new connection

Intercepting SSL connection!

Also many other apps do not work. Is there anything I can do about it? There is many traffic that I can see in 'network log' app but which does not appear in Sandroproxy.

I am using cyanogen mod 10.2, have iptables 1.4.x and exported the certificate to the store. I checked to capture all traffic from whataapp and all traffic on the 5222 ports etc

Thank you very much
[Android Software Development] SandroBSupp:
Some apps can not be intercepted.

They use certificate pinning, so certificate that is generated by SandroProxy just in time will be rejected.

One way would be to change app code and disable certificate pinning, checking.

For sure I know that Twitter do this. WhatsApp maybe too in recent versions.

Another problem with capturing WhatsApp could also be that protocol is not http or websockets.

SandroProxy can capture just those.It is one kind of xmpp.

You should check those links for more information.

https://github.com/venomous0x/WhatsAPI

http://en.wikipedia.org/wiki/WhatsApp

http://blog.philippheckel.com/2013/...p-password-from-your-android-phone-or-iphone/

About capturing all network traffic.

if you are using iptables on root device you can see that sandroproxy is just redirecting ports 80, 443, 5228, 5222.

All other tcp ports are not redirected. You can make your own iptables rules to make other ports be redirected to proxy if you like.

To see what kind of connections are open you can also use SandroProxy

http://code.google.com/p/sandrop/issues/detail?id=76

Hope that helps. If you need more help send mail to supp.sandrob@gmail.com
[Android Software Development] ripnix:
i wanted to create a tunnel and connect trough that, but i couldnt find a solution

http://xdaforums.com/showthread.php?t=2483726

can u guys guide me on how to setup the iptables rules? to try again?

i dont supose sandroproxy can connect on socks5?
[Android Software Development] SandroBSupp:
Sorry, no support for socks proxies. Maybe in some upcoming versions.
[Android Software Development] SandroBSupp:
New feature: capture custom protocol over ssl

Added is mode that can be used to capture any protocol over ssl and then examined with wireshark.

http://code.google.com/p/sandrop/wiki/HowToCapture5228Flow
[Android Software Development] SandroBSupp:
New feature: custom port redirection

Added is new feature to APP tab. Custom port can be redirected not just 80 and 443.

This is convenient for redirect other protocols than http and https.