PCAPdroid - network monitor is a privacy-focused open source tool that lets you track, analyze, and block connections made by other apps on your Android device. As a robust network monitor, PCAPdroid - network monitor simulates a VPN locally to capture traffic without root access, ensuring all data stays on your device for secure inspection.
Core Features
With PCAPdroid - network monitor you can log connections from both user and system apps, extract SNI, DNS queries, HTTP URLs, and remote IP addresses. The built-in decoders allow inspection of HTTP requests and replies, while the hexdump and payload export help deep-dive into packet details. This Android network traffic analyzer also decrypts HTTPS/TLS traffic and generates SSLKEYLOGFILE for advanced analysis.
Data Export and Real-Time Analysis
The app supports dumping traffic to a PCAP file, downloading it via a browser, or streaming it to a remote receiver like Wireshark for real-time analysis. You can filter traffic with custom rules to spot anomalies and identify server country and ASN using offline databases. On rooted devices, PCAPdroid - network monitor can run alongside other VPN apps, expanding its utility.
Paid Enhancements
For users needing extra control, the paid version adds a firewall to block individual apps, domains, or IP addresses, plus malware detection using third-party blacklists. The community on Telegram offers updates and discussion around the latest features of PCAPdroid - network monitor, making it a continually evolving network monitor for security-conscious users.
