关键词: 手机取证, 抓包, 终端, 安卓系统

Abstract: Aiming at the difficult problems about the forensic and the packet capture analysis of the terminals, an analytical method of mobile phone packet capture based on Android system is presented. By applying the cloud architecture, user behavior analysis concept, terminal baseband signal analysis technology, and IP communication packet analysis technology, the method can locate, forensic and analyze the terminals.

Key words: mobile phone forensic, packet capture, terminals, Android system