PCAPdroid

PCAPdroid is a privacy-friendly open source app which can track, analyze and block the connections made by the other apps on the device. It can also export a PCAP dump of the traffic, inspect HTTP requests, decrypt TLS traffic and much more. PCAPdroid simulates a VPN in order to capture the network traffic without root. It does not use a remote VPN server, instead data is processed locally on the device. Main features: - Log and analyze the connections made by user and system apps - Get a summary of how much data each app sent and received - Low battery usage for continuous, all-day capture - Extract hosts and IP addresses from DNS, TLS and HTTP - Record the traffic to PCAP files with additional app metadata - Send traffic via PCAP-over-IP for real-time analysis (e.g. on Wireshark) - Decrypt the HTTPS/TLS traffic, extract the URLs and save the SSLKEYLOGFILE - Inspect the HTTP requests/replies and export them to HAR - Identify the country and ASN of the remote server via offline DB lookups - On rooted devices, capture the traffic while other VPN apps are running Paid features: - Firewall: create rules to block individual apps, domains and IP addresses - Malware detection: detect malicious connections by using third-party blacklists - PcapNG format: makes it easier to export and analyze decrypted traffic If you plan to use PCAPdroid to perform packet analysis, check out [the specific section](https://www.google.com/url?q=https%3A%2F%2Femanuele-f.github.io%2FPCAPdroid%2Fquick_start%2314-packet-analysis&sa=D&sntz=1&usg=AOvVaw1IjDnDKpBGs-bgW8QYho9B) of the manual. Join the international PCAPdroid community [on Telegram](https://www.google.com/url?q=https%3A%2F%2Ft.me%2FPCAPdroid&sa=D&sntz=1&usg=AOvVaw1Dw0NGQLBMQEykPKv4D5ia) or [on Matrix](https://www.google.com/url?q=https%3A%2F%2Fmatrix.to%2F%23%2F%2523pcapdroid%3Amatrix.org&sa=D&sntz=1&usg=AOvVaw13G9ty-yeGOKgbaZT53Vpw).

Repo

Appears in 5 app stacks.

0 sats / 0 zaps received in the past year.