This is the protocol iTunes uses to talk to the booted iPhone. It uses usbmux to provide TCP like connectivity over a USB port using SSL. There is a pairing process iTunes uses to establish the secure channel. File transfer is provided by AFC.
It appears that it uses different device IDs:
Patch: Disable SSL
There is a way to disable SSL encyption during iTunes communication on jailbroken devices by patching lockdownd binary:
- (#) Disable SSL protection
- (#) FW 2.1
- (#) binary /usr/libexec/lockdownd
Offset 000112F8: 0C 30 98 E5 > 00 30 A0 E3 ; Conn.UseSSL = false
After applying the patch all packets between iPhone and iTunes become plain and clear. Musthave for R&D ppl.