Android使用它TCPDUMP抓取数据包

1 下载tcpdump

2 执行命令如下:

➜  ~ adb root
restarting adbd as root
 adb remote%                                                                                                                                                                    ➜  ~  adb remount
remount succeeded
➜  ~ adb push Downloads/tcpdump /data/local/tcpdump
Downloads/tcpdump/: 782 files pushed. 2.5 MB/s (6751200 bytes in 2.528s)
➜  ~ adb shell chmod 6755 /data/local/tcpdump
➜  ~

3 开始抓包

adb shell tcpdump -w /data/capture0.pcap
也可以添加命令抓取一定规则的数据包

4 导出数据宝

➜  ~ adb pull /data/capture0.pcap Desktop/tcpdump_data/

5 使用Wireshark分析数据包

TCPDUMP命令详解: