Tcpdump抓取 Android 网络包

Android平台要抓TCP数据包，可以使用TCPdump工具。 

1   下载Android 平台的 Tcpdump 

      http://www.tcpdump.org 

2   push 到手机中 
你需要root权限， 
adb root 
adb remount 
adb push  目录\tcpdump /data/local/tcpdump 
adb shell chmod 6755  /data/local/tcpdump 

3  抓包 
adb shell tcpdump -w  /data/capture0.pcap 
adb shell tcpdump ip 10.1.2.13 and 10.2.3.12  -w    /data/capture1.pcap 
或者 
adb shell tcpdump -p  -s 0 -w  /sdcard/capture.pcap 
# "-p": disable promiscuous mode (doesn't work anyway) 
# "-s 0": capture the entire packet 
# "-w": write packets to a file (rather than printing to stdout) 
   ... do whatever you want to capture,then ^C to stop it ... 
4   导出日志 
adb pull /data/capture0.pcap   /home/linghu/ 
adb pull  /sdcard/capture.pcap  /home/linghu/ 

5   分析 
使用Wireshark 下载wireshark查看数据包，地址是http://www.wireshark.org/download.html。