Security › PCAPdroid
thumb_up Follow me on GitHub to get notifications about my projects (like Fossdroid Core), thanks! close

PCAPdroid

No-root network monitor and traffic dump tool for Android devices
Version: 1.5.4
Added: 03-02-2021
Updated: 07-08-2022
PCAPdroid is a privacy-friendly app which lets you track and analyze the connections made by the other apps in your device.
It also allows you to export a PCAP dump of the traffic, inspect HTTP, decrypt TLS traffic and much more.

PCAPdroid simulates a VPN in order to capture the network traffic without root. It does not use a remote VPN server. All the data is processed locally on the device.

Features:

* Log and examine the connections made by user and system apps
* Extract the SNI, DNS query, HTTP URL and the remote IP address
* Inspect HTTP requests and replies thanks to the built-in decoders
* Inspect the full connections payload as hexdump/text
* Decrypt the HTTPS/TLS traffic and export the SSLKEYLOGFILE
* Dump the traffic to a PCAP file, download it from a browser, or stream it to a remote receiver for real time analysis (e.g. wireshark)
* Create rules to filter out the good traffic and easily spot anomalies
* Identify the country and ASN of remote server via offline db lookups
* On rooted devices, capture the traffic while other VPN apps are running

If you plan to use PCAPdroid to perform packet analysis, please check out the specific section of the manual.

Join the PCAPdroid international community on telegram or on matrix.

Screenshot of PCAPdroid Screenshot of PCAPdroid Screenshot of PCAPdroid
code Source file_download Download