iOS APP抓包方法介绍之tcpdump

1. 将手机通过usb口连在mac电脑上
2. 通过xcode查看手机的uuid,如 rvictl -s f7f41359d97aa34487f574a4db2e028dfd4f7aa

3. 打开终端，开启虚拟网口

   $rvictl -s f7f41359d97aa34487f574a4db2e028dfd4f7aa
   Starting device f7f41359d97aa34487f574a4db2e028dfd4f7aa [SUCCEEDED] with interface rvi0 (rvi0就是虚拟网口的名字，抓包的时候需要使用)
   $sudo tcpdump -i rvi0 -w trace.pcap
   tcpdump: WARNING: rvi0: That device doesn't support promiscuous mode(BIOCPROMISC: Operation not supported on socket)tcpdump: listening on rvi0, link-type PKTAP (Packet Tap), capture size 262144 bytes
   (BIOCPROMISC: Operation not supported on socket)
   tcpdump: listening on rvi0, link-type PKTAP (Packet Tap), capture size 262144 bytes

4. 然后就可以在手机上运行app，执行你想要的操作了。所有报文会存储在trace.pcap文件上

5. 抓包结束后，记得删除虚拟接口

   $ rvictl -x f7f41359d97aa34487f574a4db2e028dfd4f7aa

参考资料：
app developer: Getting a Packet Trace