一、下载tcpdump,官网 http://www.tcpdump.org/ ,下载源码后编译
git clone https://github.com/the-tcpdump-group/tcpdump
git clone https://github.com/the-tcpdump-group/libpcap
二、Linux环境编译
编译libpcap
./configure --prefix=$PWD/output --host=arm-linux --with-pcap=linux
make -j16
make install
编译tcpdump
./configure --host=arm-linux --with-pcap=linux
make -j16
make install
编译完成后,找到tcpdump文件,复制出来
三、放到安卓data/local/目录下,执行抓包
adb push tcpdump /data/local/tmp/tcpdump
增加tcpdump root权限
chmod +x /data/local/tmp/tcpdump
四、抓包
/data/local/tmp/tcpdump -p -vv -s 0 -w /sdcard/capture.pcap
抓包完成后,将capture.pcap文件提取到电脑,用wireshark查看即可。
编译后的tcpdump下载地址:
https://download.csdn.net/download/nice_really/87154284