PCAPdroid - network monitor

Emanuele Faranda

In-app purchases

About this app

PCAPdroid is a privacy-friendly open source app which lets you track, analyze and block the connections made by the other apps in your device. It also allows you to export a PCAP dump of the traffic, extract metadata and much more!

PCAPdroid simulates a VPN in order to capture the network traffic without root. It does not use a remote VPN server. All the data is processed locally on the device.

Features:

- Log and examine the connections made by user and system apps
- Extract the SNI, DNS query, HTTP URL and the remote IP address
- Inspect HTTP requests and replies thanks to the built-in decoders
- Inspect the full connections payload as hexdump/text and export it
- Decrypt the HTTPS/TLS traffic and export the SSLKEYLOGFILE
- Dump the traffic to a PCAP file, download it from a browser, or stream it to a remote receiver for real time analysis (e.g. wireshark)
- Create rules to filter out the good traffic and easily spot anomalies
- Identify the country and ASN of remote server via offline db lookups
- On rooted devices, capture the traffic while other VPN apps are running

Paid features:

- Firewall: create rules to block individual apps, domains and IP addresses
- Malware detection: detect malicious connections by using third-party blacklists

If you plan to use PCAPdroid to perform packet analysis, please check out the specific section of the manual.

Join the PCAPdroid community on telegram to discuss and receive updates on the latest features.

Ratings and reviews

Have only used it for about 30 minutes but this helped me tremendously in the back and forth I've been in with my ISP. I was able to prove they have an incorrectly advertised route that was causing all sorts of weird issues with Google services & devices on my network. The app let me capture Play Store traffic specifically to pinpoint the exact subdomain that was having issues so I could run a tracert. Been trying to solve this issue for a week so this app really was a lifesaver.

Handy, but has a big issue right now: it misses some of the connections, making the app inaccurate. Some connections are not captured or logged, tested with my simple app that loads mutiple URL's at the same time, they all load but PCAPdroid doesn't show at least half of them.

Doesn't work. It's giving false results plus I paid for extra features to even just capture the data. Again, doesn't work. Don't waste your time. It's logging an app's activity I've never had and my friend who does left awhile ago. But that's all it's logging and you can't save the data. I paid for the feature to do so and it didn't work. I believe this is a scam app and gave it all kinds of access so I'll probably be robbed soon. F y'all fr.

What's new

- Add toggle for auto-reconnection on third-party VPN termination
- Fix uninstalled apps not removed from app filter
- Fix broken PCAP file loading feature
- Add IPv6 bytes stats (credits: myzhan)