Android uses tcpdump and Wireshark to crawl network packets

Source: Internet
Author: User







1. Download and install Tcpdump
: tcpdump
To install tcpdump, the command-line mode executes sequentially:


Java
123 adb root adb push C:\users\ trinea\desktop\< Span class= "crayon-i" >tcpdump /data/local/tcpdump adb Shell chmod 6755 /data/local/tcpdump


Where the first parameter of the ADB push is the path of the local tcpdump.






2. Start and run tcpdump
command-line mode to run the following command:


1 ADB Shell /data/local/tcpdump -n -s 0


At this point on the phone to do any of the network-related operations will be printed on the screen, you can stop by CTRL + C.



Due to the limitation of the command line maximum output and the constant scrolling of the screen, we can save the crawled network packet to the SD card, such as the following command:


1 adbshell /data/local/tcpdump -i any< Span class= "crayon-h" > -p -s 0 -w /sdcard/netcapture pcap


Still through CTRL + C stop, pull files to the local PC


1 ADB pull /sdcard/netcapture. Pcap d:\\


Through help we find that Tcpdump supports the following parameters:
tcpdump [-AADDEFLLNNOPQRSTUUVXX] [-C Count] [-c File_size]
[-E Algo:secret] [-F file] [-I. Interface] [-M secret]
[-R File] [-S Snaplen] [-T type] [-W file]
[-W FileCount] [-y Datalinktype] [-Z User]
[Expression]
Where-C indicates the number of requests for monitoring, and the maximum size of the stored file;
-I represents the type of monitoring, and-s indicates the size of the crawled network request, and 0 is the fetch of the entire network packet, and-W indicates that the crawled package saves the file path and does not print in standard output at this time. And the port parameter can be added to represent the ports.






3. Analyze data with Wireshark



Wireshark, Chinese address: http://www.onlinedown.net/softdown/2883_2.htm, English address (requires FQ): http://www.wireshark.org/download.html



Log can be analyzed by opening capture.pcap with Wireshark
About Wireshark specifically visible: http://www.cnblogs.com/TankXiao/archive/2012/10/10/2711777.html



Rotor http://www.trinea.cn/android/tcpdump_wireshark/



Android uses tcpdump and Wireshark to crawl network packets


Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.