PCAPdroid

La description de PCAPdroid

Site Editorial Commentary：No-root network monitor, firewall and PCAP dumper for Android

PCAPdroid is a privacy-focused, open-source Android application designed to empower you with comprehensive control over your device's network activity. This powerful tool allows you to meticulously track, thoroughly analyze, and effectively block connections established by other apps installed on your device. Beyond basic monitoring, PCAPdroid enables you to export a PCAP dump of network traffic, extract valuable metadata, and much more, all while prioritizing your privacy.

PCAPdroid cleverly simulates a vpn service to capture network traffic without requiring root access. Crucially, it operates entirely locally on your device, eliminating the need for a remote VPN server and ensuring your data remains under your control. All data processing occurs directly on your device, enhancing your privacy and security.

Key Features:

- **Connection Logging and Examination:** Monitor and scrutinize connections made by both user-installed applications and system processes.
- **Metadata Extraction:** Extract essential information such as SNI (Server Name Indication), DNS queries, HTTP URLs, and remote IP addresses.
- **HTTP Inspection:** Utilize built-in decoders to inspect HTTP requests and responses for deeper analysis.
- **Payload Analysis:** Examine the complete connection payload in both hexdump and text formats, with the option to export the data.
- **HTTPS/TLS Decryption:** Decrypt HTTPS/TLS traffic and export the SSLKEYLOGFILE for advanced security analysis.
- **PCAP Dumping and Streaming:** Dump network traffic to a PCAP file for Offline analysis, download it directly from a browser, or stream it to a remote receiver (e.g., Wireshark) for real-time monitoring.
- **Traffic Filtering:** Create custom rules to filter out desired traffic and easily identify anomalies or suspicious activity.
- **Geolocation and ASN Identification:** Identify the country and Autonomous System Number (ASN) of remote servers through offline database lookups.
- **Rooted Device Support:** On rooted devices, capture network traffic even when other VPN apps are active.

Premium Features (Paid):

- **Firewall:** Implement robust firewall rules to block individual apps, specific domains, and IP addresses, enhancing your device's security.
- **Malware Detection:** Detect potentially malicious connections by leveraging third-party blacklists, providing an additional layer of protection.

If you intend to use PCAPdroid for in-depth packet analysis, be sure to consult the dedicated section of the user manual for detailed instructions and best practices.

Stay connected and informed by joining the PCAPdroid community on Telegram. Discuss features, receive updates, and share your Experiences with other users.