Use tcpdump and wireshark to analyze network packet capture for android phones

A simple network packet capture Analysis Method for mobile phones:

1. Compile tcpdump

Download the source code from the official website of tcpdump and compile

Tcpdump Official Website: http://www.tcpdump.org/

2. Install tcpdump on your phone

You only need to copy the compiled tcpdump program to your mobile phone and grant the permission

Adb push /Data/local/tcpdump adb shell su chmod 6755/data/local/tcpdump

3. Use tcpdump to start packet capture

Cd/data/local/

Tcpdump-p-vv-s 0-w/sdcard/capture. pcap

For more tcpdump command usage, refer to http://www.tcpdump.org/manpages/tcpdump.1.html

4. Execute the task you want to analyze

5. Terminate network packet capture (ctrl + C)

6. Copy the network packet capture data back to linux

Adb pull/sdcard/capture. pcap

7. Use wireshark to analyze tcpdump packet capture data

Download wireshark: http://www.wireshark.org/download.html

Start analysis-http://wiresharkdownloads.riverbed.com/video/wireshark/introduction-to-wireshark/