pcapdroid
An Android app that monitors the network connections of other apps without root, using a local VPN. It can log traffic, export PCAP files and inspect requests, with a paid firewall option.
Share on XLicense: GPL-3.0
Overview
PCAPdroid is an open-source Android app that tracks, analyzes and blocks the connections made by other apps on the device, without root. It creates a local VPN, so traffic is processed on the phone and no remote VPN server is used. It can show per-app data usage, export PCAP files with app metadata, stream traffic to Wireshark, decrypt TLS traffic, and inspect HTTP requests and export them to HAR. A firewall and malware detection are paid features.
Key features
- Logs connections of user and system apps without root
- Exports PCAP files with app information
- Streams traffic live to Wireshark using PCAP-over-IP
- Decrypts TLS traffic and saves the SSLKEYLOGFILE
- Inspects HTTP requests and exports them to HAR
Best for
Developers, analysts and privacy-minded users who want to see what their Android apps send. The firewall and malware detection are paid, and capturing beside other VPN apps needs a rooted device.
- Upstream
- emanuele-f/PCAPdroid
- Fork on GitHub
- Guo-astro/pcapdroid
- Upstream stars
- 4.9k
- Category
- Security and networking
- Language
- Java
- License
- GPL-3.0
- Forked
- 2026-09-12
- Sync status
- In syncLast synced 2026-10-10
More in Security and networking
mubeng is a Go tool for checking proxy availability and rotating proxy IPs for requests. It helps users manage a proxy pool without extra checking tools when they need a rotating upstream or validation step.
Forked 2026-10-07Last synced 2026-10-10License: Apache-2.0Security and networkingGitHub
A small DNS ad-blocker for ESP32-C3 that stops ad lookups on a network and manages them through a web dashboard.
Forked 2026-10-06Last synced 2026-10-10License: MITSecurity and networkingGitHub
A local tool for checking whether personal information appears in publicly exposed internet sources. It helps people review privacy exposure and keep the process local.
Forked 2026-10-03Last synced 2026-10-10License: MITSecurity and networkingGitHub
GhostTrack is a Python OSINT tool for checking IP addresses, phone numbers, and social media usernames. It runs on Linux or Termux for information gathering and authorized testing.
Forked 2026-09-29Last synced 2026-10-10No license declaredSecurity and networkingGitHub