Android 某些機型不帶tcpdump的解決辦法

輸入mount命令

mount

rootfs on / type rootfs (ro,relatime)

tmpfs on /dev type tmpfs (rw,relatime,mode=755)

devpts on /dev/pts type devpts (rw,relatime,mode=600)

proc on /proc type proc (rw,relatime)

sysfs on /sys type sysfs (rw,relatime)

tmpfs on /sqlite_stmt_journals type tmpfs (rw,relatime,size=4096k)

none on /dev/cpuctl type cgroup (rw,relatime,cpu)

/dev/block/mtdblock3 on /system type yaffs2 (ro,relatime)

/dev/block/mtdblock5 on /data type yaffs2 (rw,nosuid,nodev,relatime)

/dev/block/mtdblock4 on /cache type yaffs2 (rw,nosuid,nodev,relatime)

/dev/block//vold/179:1 on /sdcard type vfat (rw,dirsync,nosuid,nodev,noexec,rela

time,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,ioc

harset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)

可以看到

/dev/block/mtdblock3 on /system type yaffs2 (ro,relatime)

重新掛載 輸入命令

mount -o remount /dev/block/mtdblock3 /system 

再次輸入mount

可以看到

# mount

mount

rootfs on / type rootfs (ro,relatime)

tmpfs on /dev type tmpfs (rw,relatime,mode=755)

devpts on /dev/pts type devpts (rw,relatime,mode=600)

proc on /proc type proc (rw,relatime)

sysfs on /sys type sysfs (rw,relatime)

tmpfs on /sqlite_stmt_journals type tmpfs (rw,relatime,size=4096k)

none on /dev/cpuctl type cgroup (rw,relatime,cpu)

/dev/block/mtdblock3 on /system type yaffs2 (rw,relatime)

/dev/block/mtdblock5 on /data type yaffs2 (rw,nosuid,nodev,relatime)

/dev/block/mtdblock4 on /cache type yaffs2 (rw,nosuid,nodev,relatime)

/dev/block//vold/179:1 on /sdcard type vfat (rw,dirsync,nosuid,nodev,noexec,rela

time,uid=1000,gid=1015,fmask=0702,dmask=0702,allow_utime=0020,codepage=cp437,ioc

harset=iso8859-1,shortname=mixed,utf8,errors=remount-ro)

可以看到/system已經可以任意刪除修改

然後把tcpdump文件導入到/system/xbin/目錄下

adb push d:/tcpdump /system/xbin/

然後運行命令

# cd system

cd system

# cd xbin

cd xbin

# ls

ls

tcpdump

# ./tcpdump

./tcpdump

./tcpdump: permission denied

# chmod +x tcpdump

chmod +x tcpdump

# ./tcpdump

./tcpdump

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

listening on rmnet0, link-type EN10MB (Ethernet), capture size 96 bytes

增加權限之後 tcpdump就可以使用了