Grab Bag preparation 1. Android phones require root access first. A test method for root access: Install and open the Terminal emulator (available through the Android Market, etc.). In the terminal emulator interface input SU and enter, if the error is not root, if the command prompt from the change # is rooted;2. If the Android phone is not yet root, you can do root processing by superoneclick or other means (you need to install the Microsoft. NET Framework first). SuperOneClick Brush Root Access Tutorial: (http://soft.shouji.com.cn/news/501.shtml) 3. Need to get Android SDK4 first. Need to get tcpdump software, get Address (http://www.strazzere.com/android/tcpdump), note is right-click Save As Capture Step 1. Connect your Android phone to your computer USB and open Windows Command Prompt window 2. Copy the Tcpdump program to the Android phone (the directory file in front of the command is the local address, the latter directory is the destination mobile address) C:\ANDROID-SDK-WINDOWS\PLATFORM-TOOLS>ADB Push c:/ Tcpdump/data/local/tcpdump3. Modify the permissions of Tcpdump c:\android-sdk-windows\platform-tools>adb shell#chmod 777/data/local/tcpdump4. Go to root c:\android-sdk-windows\platform-tools>adb shell$ su after running the SU instruction, the mobile Terminal desktop will appear the corresponding message to confirm your recognition of the root operation. 5. Run the tcpdump, and enter the following command to start the capture package. /data/local/tcpdump-p-vv-s 0-w/sdcard/capture.pcap6. On the mobile phone to perform the corresponding need to carry out the packet analysis operation, after the completion of execution in the command prompt window to execute CTRL + C interrupt capture process 7. Copy the capture results to local (the front directory is the phone-side address, the back directory is the local address) c:\android-sdk-windows\platform-tools>adb Pull/sdcard/capture.pcap C:/8. Use tools such as wireshark to view scratchesPackage file Capture.pcap
Android system phone-side Grab packet method (tcpdump)