package icon

PCAPdroid

No-root network monitor and traffic dump tool for Android devices
PCAPdroid is a privacy-friendly app which lets you track and analyze the connections made by the other apps in your device.
It also allows you to export a PCAP dump of the traffic, inspect HTTP, decrypt TLS traffic and much more.

PCAPdroid simulates a VPN in order to capture the network traffic without root. It does not use a remote VPN server, instead data is processed locally on the device.

Features:

* Log and examine the connections made by user and system apps
* Extract the SNI, DNS query, HTTP URL and the remote IP address
* Inspect HTTP requests and replies thanks to the built-in decoders
* Inspect the full connections payload as hexdump/text
* Decrypt the HTTPS/TLS traffic and export the SSLKEYLOGFILE
* Dump the traffic to a PCAP file, download it from a browser, or stream it to a remote receiver for real-time analysis (e.g. Wireshark)
* Create rules to filter out the good traffic and easily spot anomalies
* Identify the country and ASN of remote server via offline DB lookups
* On rooted devices, capture the traffic while other VPN apps are running

If you plan to use PCAPdroid to perform packet analysis, please check out the specific section of the manual.

Join the PCAPdroid international community on Telegram or on Matrix.

Donate

  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 1.7.5 (78) suggested Added on Nov 12, 2024

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 5.0 or newer.

    It is built by F-Droid and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • view Wi-Fi connections
      Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • android.permission.INTERACT_ACROSS_USERS
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • android.permission.WRITE_CLIPS
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • com.emanuelef.remote_capture.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 10 MiB PGP Signature | Build Log

  • Version 1.7.4 (77) - Added on Oct 20, 2024

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 5.0 or newer.

    It is built by F-Droid and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • view Wi-Fi connections
      Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • android.permission.INTERACT_ACROSS_USERS
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • android.permission.WRITE_CLIPS
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • com.emanuelef.remote_capture.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 10 MiB PGP Signature | Build Log

  • Version 1.7.3 (76) - Added on Sep 16, 2024

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 5.0 or newer.

    It is built by F-Droid and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • view Wi-Fi connections
      Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • android.permission.INTERACT_ACROSS_USERS
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • android.permission.WRITE_CLIPS
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • com.emanuelef.remote_capture.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 10 MiB PGP Signature | Build Log