转：http://www.cnblogs.com/findyou/p/3491035.html
写的相当详细且完整，业界良心。
adb push d:\tcpdump /data/local/
adb pull /sdcard/ThinkDrive.pcap E:\ //不行
adb pull /sdcard/ThinkDrive.pcap . //可以
/data/local/tcpdump -p -vv -s 0 -w /sdcard/momo0717_2100.pcap
//wiresshark的过滤语句
ip.dst==10.66.117.231 && tcp.dstport==37620 && ip.src==14.215.231.166 && tcp.srcport==80