PCAPdroid - network monitor app info
PCAPdroid is a privacy-friendly open source app which lets you track, analyze and block the connections made by the other apps in your device. It also allows you to export a PCAP dump of the traffic, extract metadata and much more!n
n
PCAPdroid simulates a VPN in order to capture the network traffic without root. It does not use a remote VPN server. All the data is processed locally on the device.n
n
Features:n
n
- Log and examine the connections made by user and system appsn
- Extract the SNI, DNS query, HTTP URL and the remote IP addressn
- Inspect HTTP requests and replies thanks to the built-in decodersn
- Inspect the full connections payload as hexdump/textn
- Decrypt the HTTPS/TLS traffic and export the SSLKEYLOGFILEn
- Dump the traffic to a PCAP file, download it from a browser, or stream it to a remote receiver for real time analysis (e.g. wireshark)n
- Create rules to filter out the good traffic and easily spot anomaliesn
- Identify the country and ASN of remote server via offline db lookupsn
- On rooted devices, capture the traffic while other VPN apps are runningn
n
Paid features:n
n
- Firewall: create rules to block individual apps, domains and IP addressesn
- Malware detection: detect malicious connections by using third-party blacklistsn
n
If you plan to use PCAPdroid to perform packet analysis, please check out the specific section of the manual.n
n
Join the PCAPdroid community on telegram to discuss and receive updates on the latest features.
