PCAPdroid
No-root network monitor, firewall and PCAP dumper for Android
com.emanuelef.remote_capture
About PCAPdroid
<i>PCAPdroid</i> is a privacy-friendly open source app which can track, analyze and block the connections made by the other apps on the device.
It can also export a PCAP dump of the traffic, inspect HTTP requests, decrypt TLS traffic and much more.
PCAPdroid simulates a VPN in order to capture the network traffic without root. It does not use a remote VPN server, instead data is processed locally on the device.
<b>Main features:</b>
* Log and analyze the connections made by user and system apps
* Get a summary of how much data each app sent and received
* Low battery usage for continuous, all-day capture
* Extract hosts and IP addresses from DNS, TLS and HTTP
* Record the traffic to PCAP files with additional app metadata
* Send traffic via PCAP-over-IP for real-time analysis (e.g. on Wireshark)
* Decrypt the HTTPS/TLS traffic, extract the URLs and save the SSLKEYLOGFILE
* Inspect the HTTP requests/replies and export them to HAR
* Identify the country and ASN of the remote server via offline DB lookups
* On rooted devices, capture the traffic while other VPN apps are running
If you plan to use PCAPdroid to perform packet analysis, check out <a href='https://emanuele-f.github.io/PCAPdroid/quick_start#14-packet-analysis'>the specific section</a> of the manual.
Join the international PCAPdroid community <a href="https://t.me/PCAPdroid">on Telegram</a> or <a href="https://matrix.to/#/#pcapdroid:matrix.org">on Matrix</a>.