PCAPdroid - network monitor APK

PCAPdroid - network monitor

Overview

• PCAPdroid is an open-source, privacy-focused network monitoring tool for Android.

• It empowers users to track, analyze, and inspect network traffic generated by both user and system applications without requiring root access.

Core Architecture

• Local Processing: Simulates a local VPN interface directly on the device to intercept traffic securely.

• No Remote Server: Operates entirely offline without routing your data through external or third-party VPN servers.

Key Features

• Traffic Logging: Monitor and examine active connections for all installed applications.

• Metadata Extraction: Automatically extract Server Name Indication (SNI), DNS queries, HTTP URLs, and remote IP addresses.

• Payload Inspection: Inspect HTTP traffic using built-in decoders, view full connection payloads as text or hexdump, and export data.

• Traffic Decryption: Decrypt HTTPS and TLS traffic and export the corresponding SSLKEYLOGFILE.

• PCAP Export and Streaming: Dump network traffic to a PCAP file for browser download or stream data in real time to external tools like Wireshark.

• Network Intelligence: Identify the geographical country and Autonomous System Number (ASN) of remote servers using offline database lookups.

• Root Capabilities: Capture network traffic on rooted devices even while other VPN applications are actively running.

• Filtering and Rules: Create custom rules to filter out standard traffic and easily identify network anomalies.

Paid Features

• Advanced Firewall: Implement strict rules to block specific apps, domains, and suspicious IP addresses.

• Malware Detection: Identify and flag potentially malicious connections by cross-referencing traffic against external threat blacklists.

Community and Resources

• Manual: Users interested in advanced packet analysis are encouraged to consult the dedicated section within the official documentation.

• Community: Join the active Telegram group to participate in discussions and receive prompt updates regarding new features.

FAQ

Q: How does PCAPdroid capture traffic without requiring root?

A: The app creates a local VPN interface directly on the device. All network packets are routed through this virtual interface, allowing PCAPdroid to log and analyze them while keeping the data on‑device and never sending it to an external server.

Q: Is my data sent to any third‑party servers when I use PCAPdroid?

A: No. PCAPdroid operates entirely offline. All processing, logging, and analysis happen locally on your phone, so none of your network traffic leaves the device unless you deliberately export it yourself.

Q: What kinds of information can I extract from the captured traffic?

A: You can automatically obtain Server Name Indication (SNI) values, DNS queries, HTTP URLs, and remote IP addresses. For HTTP(S) traffic you can view the full payload as text or hexdump, and you can decrypt HTTPS/TLS sessions to inspect the clear‑text content.

Version History

v2.0.0——26 Aug 2026

No-root network monitor, firewall and PCAP dumper for Android Download the latest version of PCAPdroid - network monitor to enjoy new features and updates immediately!

*2.0.0

- Android 17 support: the "Nearby devices" permission is now required

- New Capture List view

- Implement app isolation (Firewall)

- Add settings import/export

- Mitm addon v2.3 (mitmproxy 12.2.3)

- New translations: BN, FR, HI, JA, KO, MS, UR, VI

- Bug fixes and dependency updates

*1.9.1

- Fix minor crashes

- Change zstd decompression library

*1.9.0

- New HTTP requests view

- Export HTTP data in the HAR format

- Add Portuguese (BR) translation

- Support the zstd compression

- New language selector on Android 12 and below

- Pretty-print JSON in HTTP data

- Fix HTTP/2 handling

- Fix WebSocket data loading from PCAP file