android中使用tcpdump拦截分析网络数据包

1、下载tcpdump
http://pan.baidu.com/s/1c0vkU2k

2、通过adb命令上传到手机里
adb push tcpdump /system/bin

3、adb shell tcpdump -p -vv -s 0 -w /sdcard/capture.pcap

#tcpdump 用法：
 
tcpdump -i any -p -s 0 -w /sdcard/capture.pcap
命令参数：
# "-i any": listen on any network interface
# "-p": disable promiscuous mode (doesn't work anyway)
# "-s 0": capture the entire packet
# "-w": write packets to a file (rather than printing to stdout)
# ... do whatever you want to capture, then ^C to stop it …

4、运行要截包的app，完成对应操作后，CTRL + C 终止，然后通过下面命令取出命令：
adb pull /sdcard/capture.pcap

5、通过wireshark打开capture.pcap文件，查看对应的数据，如下图：

转自：http://www.yinqisen.cn/blog-470.html