BufferedReader brW = new BufferedReader(new InputStreamReader(p.getErrorStream()));
while((str = brW.readLine()) != null)
Log.d("cwmp", "w:"+str);

#define SOCKET_NAME "fstiService"
#define LOGD(...) __android_log_print(ANDROID_LOG_DEBUG, "itv_assistance", __VA_ARGS__)
#include <jni.h>
#include <stdio.h>
#include <stdlib.h>
#include <errno.h>
#include <string.h>
#include <sys/types.h>
#include <netinet/in.h>
#include <sys/socket.h>
#include <sys/wait.h>
#include <sys/un.h>
#include <cutils/sockets.h>
#include <android/log.h>
#include <unistd.h>
#include <time.h>
#include <sys/time.h>
#include <pthread.h>
pthread_t thread[2];
char s_time[10]; //抓包時(shí)間子串
char s_command[256]; //抓包指令子串
//抓包指令：system("/system/bin/tcpdump -v -w /sdcard/te.pcap");
//獲取進(jìn)程tcpdump的進(jìn)程號(hào)
int getPid() {
//for Linux C
//FILE *fp = popen("ps -e | grep \'tcpdump\' | awk \'{print $1}\'", "r");
//for Android(ARM)
//FILE *fp = popen("ps | grep \'tcpdump\'", "r");
FILE *fp = popen("ps | grep \'tcpdump\'", "r");
char buff[1024] = { 0 };
while (NULL != fgets(buff, sizeof(buff), fp))
;
//取消換行符(10)
buff[strlen(buff) - 1] = '\0';
pclose(fp);
char dst[5] = { 0 };
char *p = buff;
char *q = dst;
//每一行進(jìn)程信息的第二個(gè)字符串為進(jìn)程號(hào)
while (*p != ' ')
p++;
while (*p == ' ')
p++;
while (*p != ' ')
*(q++) = *(p++);
*(q++) = '\0';
return atoi(dst);
}
//截取子串(抓包時(shí)間(秒)：抓包命令)
void substring(char *time, char *command, char *src) {
char *p = src;
char *q = time;
char *s = command;
while (*p != '/')
*(q++) = *(p++);
*(q++) = '\0';
//如果Tcpdump命令已添加環(huán)境變量，則添加下行代碼
//否則刪除下一行代碼，client傳遞的參數(shù)格式必須為: num/tcpdump所在路徑
p++;
while (*p)
*(s++) = *(p++);
*(s++) = '\0';
}
//抓包線程
void *thread1(void *arg) {
system(s_command);
}
void *thread2(void *arg) {
int i_time = atoi(s_time);
int begin = time((time_t*) NULL);
while (1) {
if (time((time_t*) NULL) - begin < i_time) {
//printf("當(dāng)前時(shí)間(s):%ld\n", time((time_t*)NULL));
continue;
} else {
int n = kill(getPid(), SIGKILL);
LOGD("the kill process result is n=%d", n);
break;
}
}
return 0;
}
//創(chuàng)建子線程
void thread_create() {
int temp;
memset(&thread, 0, sizeof(thread));
if ((temp = pthread_create(&thread[0], NULL, thread1, NULL)) != 0)
LOGD("create tcpdump thread failure");
else
LOGD("create tcpdump thread success");
if ((temp = pthread_create(&thread[1], NULL, thread2, NULL)) != 0)
LOGD("create count thread failure");
else
LOGD("create count thread success");
}
void thread_wait() {
if (thread[0] != 0) {
pthread_join(thread[0], NULL);
LOGD("tcpdump thread has terminated");
}
if (thread[1] != 0) {
//pthread_join(thread[1], NULL);
printf("counter thread has terminated");
}
}
/**
* Native層Socket服務(wù)端
*/
int main() {
int connect_number = 6;
int fdListen = -1, new_fd = -1;
int ret;
struct sockaddr_un peeraddr;
socklen_t socklen = sizeof(peeraddr);
int numbytes;
char buff[256];
//這一步很關(guān)鍵，就是獲取init.rc中配置的名為 "fstiService" 的socket
//獲取已綁定的socket，返回-1為錯(cuò)誤情況
fdListen = android_get_control_socket(SOCKET_NAME);
if (fdListen < 0) {
LOGD("failed to get socket '" SOCKET_NAME "' errno %d", errno);
exit(-1);
}
/**
* 方法說(shuō)明：開(kāi)始監(jiān)聽(tīng)（等待參數(shù)fdListen的socket連接，參數(shù)connect_number指定同時(shí)能處理的最大連接要求）
* 如果連接數(shù)目達(dá)此上限則client端將收到ECONNREFUSED的錯(cuò)誤。listen函數(shù)并未開(kāi)始連接，只是設(shè)置
* socket為listen模式，真正接收client端連接的是accept()。通常listen()會(huì)在socket()
* bind()之后調(diào)用，接著才調(diào)用accept().
* 返回值：成功返回0，失敗返回-1，錯(cuò)誤原因存在errno中
*/
ret = listen(fdListen, connect_number);
LOGD("listen result %d", ret);
if (ret < 0) {
/**
* perror(s)將一個(gè)函數(shù)發(fā)生錯(cuò)誤的原因輸出到標(biāo)準(zhǔn)設(shè)備（stderr）
* 參數(shù)s所指的字符串會(huì)先打印出，后面再加上錯(cuò)誤原因字符串
*/
perror("listen");
exit(-1);
}
/**
* 方法說(shuō)明：accept(int s, struct sockaddr * addr, socklen_t * addrlen)用來(lái)接受參數(shù)s的socket連接。
* socket必須先經(jīng)bind()、listen()函數(shù)處理過(guò)，當(dāng)有socket客戶端連接進(jìn)來(lái)時(shí)會(huì)返回一個(gè)新的socket處理
* 代碼，往后的數(shù)據(jù)傳送與讀取就是經(jīng)由新的socket處理，而原來(lái)參數(shù)s的socket能繼續(xù)使用accept()來(lái)接受新的
* 連接請(qǐng)求。連線成功時(shí), 參數(shù)addr 所指的結(jié)構(gòu)會(huì)被系統(tǒng)填入遠(yuǎn)程主機(jī)的地址數(shù)據(jù),參數(shù)addrlen為sockaddr的
* 結(jié)構(gòu)長(zhǎng)度。
* 返回值：成功返回新的socket處理代碼，失敗返回-1，錯(cuò)誤原因存在于errno中。
*/
new_fd = accept(fdListen, (struct sockaddr *) &peeraddr, &socklen);
LOGD("accept_fd %d", new_fd);
if (new_fd < 0) {
LOGD("%d", errno);
perror("accept error");
exit(-1);
}
//循環(huán)等待Socket客戶端發(fā)來(lái)消息
while (1) {
/**
* 方法說(shuō)明：recv(int s, void *buf, size_t len, unsigned int flags)用來(lái)接收
* 客戶端socket傳來(lái)的數(shù)據(jù)，并把數(shù)據(jù)存到由參數(shù)buf指向的內(nèi)存空間，參數(shù)len為可接收數(shù)據(jù)的最大長(zhǎng)度。
* 參數(shù)flags一般設(shè)0
* 返回值：失敗返回-1
*/
if ((numbytes = recv(new_fd, buff, sizeof(buff), 0)) == -1) {
LOGD("%d", errno);
perror("recv");
continue;
}
LOGD("the parameter received from socket client is %s", buff);
if(strcmp(buff, "exit") != 0){
substring(s_time, s_command, buff);
thread_create();
thread_wait();
}
char result[10] = "successp";
/**
* 方法說(shuō)明：send(int s, const void *msg, size_t len, unsigned int flags)
* 參數(shù)s為已建立好連接的socket，參數(shù)msg指向欲發(fā)送的數(shù)據(jù)內(nèi)容，參數(shù)len為數(shù)據(jù)長(zhǎng)度，flags一般置0.
* 返回值：失敗返回-1，錯(cuò)誤原因存在errno中
*/
int sendR = send(new_fd, result, strlen(result), 0);
//apk退出后，buff中仍然緩存之前的調(diào)用命令，此時(shí)會(huì)額外再執(zhí)行一次抓包，固下面代用重寫buff中數(shù)據(jù)
strcpy(buff, "exit");
if (sendR == -1) {
perror("send");
close(new_fd);
exit(0);
}
}
close(new_fd);
close(fdListen);
return 0;
}

service fstiService /system/bin/fstiService
socket fstiService stream 777 system system
class main

LOCAL_PATH := $(call my-dir)
include $(CLEAR_VARS)
#指定該模塊在所有版本下都編譯
LOCAL_MODULE_TAGS :=optional
LOCAL_MODULE := fstiService
LOCAL_SRC_FILES := fstiService.cpp
LOCAL_LDLIBS := -llog
#編譯成動(dòng)態(tài)庫(kù)
#include $(BUILD_SHARED_LIBRARY)
#編譯成可執(zhí)行文件
include $(BUILD_EXECUTABLE)

public class SocketClient {
private final String SOCKET_NAME = "fstiService";
private LocalSocket client = null;
private LocalSocketAddress address = null;
private boolean isConnected = false;
private int connectTime = 1;
public SocketClient(){
client = new LocalSocket();
//A socket in the Android reserved namespace in /dev/socket. 
//Only the init process may create a socket here
address = new LocalSocketAddress(SOCKET_NAME, LocalSocketAddress.Namespace.RESERVED);
new ConnectSocketThread().start();
}
/**
* 發(fā)送消息
* @param msg
* @return 返回Socket服務(wù)端消息回執(zhí)
*/
public String sendMsg(String msg){
if(!isConnected)
return "Connect failure";
try{
BufferedReader in = new BufferedReader(new InputStreamReader(client.getInputStream()));
PrintWriter out = new PrintWriter(client.getOutputStream());
out.println(msg);
out.flush();
return in.readLine();
}catch(IOException e){
e.printStackTrace();
}
return "Nothing Return";
}
/**
* Socket連接線程，若連接失敗會(huì)嘗試重連3次
* @author Administrator
*
*/
private class ConnectSocketThread extends Thread{
@Override
public void run() {
while(!isConnected && connectTime <= 3){
try{
sleep(1000);
Log.d("itv_assistance", "Try to connect socket; ConnectTime: "+connectTime);
client.connect(address);
isConnected = true;
}catch(Exception e){
connectTime++;
isConnected = false;
Log.d("itv_assistance", "Connect Failure");
}
}
}
}
/**
* 關(guān)閉Socket
*/
public void closeSocket(){
try{
client.close();
}catch(IOException e){
e.printStackTrace();
}
}
}