pcapdroid
An Android app that monitors the network connections of other apps without root, using a local VPN. It can log traffic, export PCAP files and inspect requests, with a paid firewall option.
Share on XLicense: GPL-3.0
Overview
PCAPdroid is an open-source Android app that tracks, analyzes and blocks the connections made by other apps on the device, without root. It creates a local VPN, so traffic is processed on the phone and no remote VPN server is used. It can show per-app data usage, export PCAP files with app metadata, stream traffic to Wireshark, decrypt TLS traffic, and inspect HTTP requests and export them to HAR. A firewall and malware detection are paid features.
Key features
- Logs connections of user and system apps without root
- Exports PCAP files with app information
- Streams traffic live to Wireshark using PCAP-over-IP
- Decrypts TLS traffic and saves the SSLKEYLOGFILE
- Inspects HTTP requests and exports them to HAR
Best for
Developers, analysts and privacy-minded users who want to see what their Android apps send. The firewall and malware detection are paid, and capturing beside other VPN apps needs a rooted device.
- Upstream
- emanuele-f/PCAPdroid
- Fork on GitHub
- Guo-astro/pcapdroid
- Upstream stars
- 4.8k
- Category
- Security and networking
- Language
- Java
- License
- GPL-3.0
- Forked
- 2026-09-12
- Sync status
- In syncLast synced 2026-09-29
More in Security and networking
A terminal dashboard and CLI for managing WireGuard and OpenVPN tunnels and checking network status and potential leaks. Use it to control multiple VPN profiles without a desktop client.
Forked 2026-09-29Last synced 2026-09-29License: MITSecurity and networkingGitHub
A web toolbox for IP lookup and network diagnostics. It shows IP location, ASN, reputation and risk, and checks DNS, CDN, browser fingerprint, WebRTC and AI service status.
Forked 2026-09-28Last synced 2026-09-29License: AGPL-3.0Security and networkingGitHub
A skill pack that routes AI coding clients to the right tools for reverse engineering, authorized penetration testing and security research. It can set up needed toolchains on demand.
Forked 2026-09-28Last synced 2026-09-29License: MITSecurity and networkingGitHub
A command-line tool that checks whether a username exists on hundreds of social networks. It is used for open-source intelligence work and finding accounts tied to one name.
Forked 2026-09-25Last synced 2026-09-29License: MITSecurity and networkingGitHub