My employer (a Dutch university) gave me an Android phone. I am not allowed to root it. Still I want to know what traffic goes through it. Also I want to protect myself when I am in public places.
First thing I did was to install OpenVPN. Luckily I have a dedicated Linux server running, so I can help others to attain the same. Now I have a secure VPN connection from everywhere.
But still I want to know what traffic is going on. So I installed Whireshark on my server. It sniffs the packets going over my VPN via tshark, part of Whireshark. It is fully working, I get a file with the traffic going on through the OpenVPN interface.
Now here comes the real question: What is my phone really communicating, all packets are encrypted. Is it the OpenVPN encryption, or what?
I got stuck on this, could somebody please enlighten me?