android中使用tcpdump拦截分析网络数据包

1、下载tcpdump
http://pan.baidu.com/s/1c0vkU2k

2、通过adb命令上传到手机里
adb push tcpdump /system/bin

3、adb shell tcpdump -p -vv -s 0 -w /sdcard/capture.pcap

1 2 3 4 5 6 7 8 9

#tcpdump 用法：   tcpdump -i any -p -s 0 -w /sdcard/capture.pcap 命令参数： # "-i any": listen on any network interface # "-p": disable promiscuous mode (doesn't work anyway) # "-s 0": capture the entire packet # "-w": write packets to a file (rather than printing to stdout) # ... do whatever you want to capture, then ^C to stop it …

4、运行要截包的app，完成对应操作后，CTRL + C 终止，然后通过下面命令取出命令：
adb pull /sdcard/capture.pcap

5、通过wireshark打开capture.pcap文件，查看对应的数据，如下图：

 

转自：http://www.yinqisen.cn/blog-470.html