Android利用tcpdump抓包

Instructions

  http://source.android.com/porting/tcpdump.html

  Source Code and Documents

  http://www.tcpdump.org/

  Compiled Binary Download

  http://www.strazzere.com/android/tcpdump

  数据包分析工具Wireshark

  http://www.wireshark.org/download.html

  Installing tcpdump

  Pushing the binary to an existing device

  Download tcpdump from http://www.tcpdump.org/, then execute:

  Cmd代码

  adb root

  adb remount

  adb push /wherever/you/put/tcpdump /system/xbin/tcpdump

  adb shell chmod 6755 /data/local/tmp/tcpdump

  adb root

  adb remount

  adb push /wherever/you/put/tcpdump /system/xbin/tcpdump

  adb shell chmod 6755 /data/local/tmp/tcpdump

  Running tcpdump

  You need to have root access on your device.

  Batch mode capture

  The typical procedure is to capture packets to a file and then examine the file on the desktop, as illustrated below:

  Cmd代码

  adb shell tcpdump -i any -p -s 0 -w /sdcard/capture.pcap

  # "-i any": listen on any network interface

  # "-p": disable promiscuous mode (doesn't work anyway)

  # "-s 0": capture the entire packet

  # "-w": write packets to a file (rather than printing to stdout)

  ... do whatever you want to capture, then ^C to stop it ...

  adb pull /sdcard/capture.pcap .

  sudo apt-get install wireshark # or ethereal, if you're still on dapper

  wireshark capture.pcap # or ethereal

  ... look at your packets and be wise ...

  adb shell tcpdump -i any -p -s 0 -w /sdcard/capture.pcap

  # "-i any": listen on any network interface

  # "-p": disable promiscuous mode (doesn't work anyway)

  # "-s 0": capture the entire packet

  # "-w": write packets to a file (rather than printing to stdout)

... do whatever you want to capture, then ^C to stop it ...

  adb pull /sdcard/capture.pcap .

  sudo apt-get install wireshark # or ethereal, if you're still on dapper

  wireshark capture.pcap # or ethereal

  ... look at your packets and be wise ...

  You can run tcpdump in the background from an interactive shell or from Terminal. By default, tcpdump captures all traffic without filtering. If you prefer, add an expression like port 80 to the tcpdump command line.

  Real time packet monitoring

  Execute the following if you would like to watch packets go by rather than capturing them to a file (-n skips DNS lookups. -s 0 captures the entire packet rather than just the header):

  Cmd代码

  adb shell tcpdump -n -s 0

  adb shell tcpdump -n -s 0

  Typical tcpdump options apply. For example, if you want to see HTTP traffic:

  Cmd代码

  adb shell tcpdump -X -n -s 0 port 80


http://dev.10086.cn/cmdn/wiki/index.php?doc-view-5376.html


评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值