PCAPdroid - network monitor 1.8.4

PCAPdroid is an open-source application that prioritizes privacy, allowing users to monitor, analyze, and block network connections established by other applications on their devices. Additionally, the app facilitates the exporting of PCAP traffic dumps and extraction of metadata, among other functionalities.

PCAPdroid leverages VPN simulation to intercept network traffic without necessitating root access. Notably, it operates locally on the device and does not rely on a remote VPN server.

Key Features:

• Log and analyze connections made by both user and system applications
• Extract SNI, DNS queries, HTTP URLs, and remote IP addresses
• Inspect HTTP requests and responses using the integrated decoders
• Analyze full connection payloads in hexdump or text format
• Decrypt HTTPS/TLS traffic and export the SSLKEYLOGFILE
• Save traffic to a PCAP file, download it via a browser, or stream it to a remote receiver for real-time assessment (e.g., Wireshark)
• Establish filtering rules to differentiate valid traffic and detect irregularities efficiently
• Determine the country and ASN of remote servers through offline database lookups
• On rooted devices, capture traffic concurrently with other VPN applications

Premium Features:

• Firewall functionality: Define rules to block specific applications, domains, and IP addresses
• Malware detection: Identify suspicious connections utilizing third-party blacklists

If utilizing PCAPdroid for packet analysis purposes, please refer to the dedicated section in the manual.

Feel free to join the PCAPdroid community on Telegram for discussions and updates regarding its latest features.