Android uses tcpdump, Wireshark for grab packs and analysis of technical introductions _android

Source: Internet
Author: User
Tags introductions

This article focuses on how to use tcpdump and Wireshark to grab and analyze the Android app, and it's important to note that your Android device must be root before grabbing the bag, and your computer must have an Android SDK environment .

Download and install Tcpdump

Tcpdump Link:

Select a version to download and extract the UH tcpdump file, then push it to your phone:

Copy Code code as follows:

ADB push C:\tcpdump/data/local/tcpdump

Further actions:

Copy Code code as follows:

ADB shellsuchmod +x/data/local/tcpdump

And then you can start grabbing the bag:

Copy Code code as follows:

/data/local/tcpdump-p-vv-s 0-w/sdcard/capture.pcap

At this point you can operate the appropriate operation of the application, grab bag after the completion of CTRL + C stop grasping the bag.

Then will catch Pcap file transmission local start to analyze, here assume you pull to C disk directory.

Copy Code code as follows:

ADB pull/sdcard/capture.pcap c:/

Using Wireshark to analyze grab data

Install Wireshark on PC

Wireshark Download:

If the installation is complete, you can directly hit the Pcap file just now.

Use Filters Filter

If you catch too many things, you can use the top filter, for example, I only look at the HTTP protocol, and it's from my device.

Right-click Record to view TCP stream

This feature I prefer, you can view the http,client end of the request and server-side returned data

And what I think is more powerful.

You can store the content and results of the request, for example, to view the contents of the Post

This is the content of each layer of the specific TCP/IP seen in the panel

But after this coding, and the things that are sent out by the byte stream are annoying, with the storage possible, you can see the concrete results:

Choose File->export objects->http, and you can export this record.

Finally, the summary

This is what I have recently done in my work, but in the actual operation of Tcpdump and Wireshark, there are more features, skills can be dug out, this article is for those who have never used these two tools of the introduction bar.

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.