PCAPdroid - network monitor

Emanuele Faranda

In-app purchases

About this app

PCAPdroid is a privacy-friendly open source app which lets you track, analyze and block the connections made by the other apps in your device. It also allows you to export a PCAP dump of the traffic, extract metadata and much more!

PCAPdroid simulates a VPN in order to capture the network traffic without root. It does not use a remote VPN server. All the data is processed locally on the device.

Features:

- Log and examine the connections made by user and system apps
- Extract the SNI, DNS query, HTTP URL and the remote IP address
- Inspect HTTP requests and replies thanks to the built-in decoders
- Inspect the full connections payload as hexdump/text and export it
- Decrypt the HTTPS/TLS traffic and export the SSLKEYLOGFILE
- Dump the traffic to a PCAP file, download it from a browser, or stream it to a remote receiver for real time analysis (e.g. wireshark)
- Create rules to filter out the good traffic and easily spot anomalies
- Identify the country and ASN of remote server via offline db lookups
- On rooted devices, capture the traffic while other VPN apps are running

Paid features:

- Firewall: create rules to block individual apps, domains and IP addresses
- Malware detection: detect malicious connections by using third-party blacklists

If you plan to use PCAPdroid to perform packet analysis, please check out the specific section of the manual.

Join the PCAPdroid community on telegram to discuss and receive updates on the latest features.

Ratings and reviews

loved it so much, i bought the malware detection and no root firewall. A one and only simple yet powerful tool for paranoid Information Security professionals who know there's no escaping from emerging threats. edit: There's one slight issue I'm facing. I'd like this application to be on all the time to monitor and block suspicious traffic, however, if i multitask, the monitor automatically stops saying low memory, although when I check my phone's RAM, i have 4GB free memory.

Very useful and helpful. A small feature request- right now when I export the log, only request url and some related info is included in the file, not possible to save the entire request and response data for every request into single file. saving each request and response takes too much effort since the app that I'm inspecting makes too many requests and Its very hard to open each and save the request and response. if you need more info, I'll write an email once you respond.

pretty good, one small notable bug is that when I export binary data as a file with both headers and the body it replaces the non utf-8 characters with this "�", when I export just the body it does work I think its because you do some weird write thing when exporting with the headers so it corrupts the file. still 5/5 minor bug.

What’s new

- Support 16 KB page size devices
- Make PCAP/CSV file name prefix configurable
- Fix possible invalid Pcapng block length with root
- New API options (credits: c4rl2s0n)