**PCAPdroid** is a privacy-focused, open-source app that lets you monitor, analyze, and block network connections made by other apps on your Android device. It works without needing root access by simulating a VPN to capture traffic locally, ensuring that all data processing happens on your device.
### Key Features:
– **Connection Logging**
Track the connections made by both system and user apps.
– **Extract Useful Information**
Get detailed insights including SNI (Server Name Indication), DNS queries, HTTP URLs, and remote IP addresses.
– **Inspect Traffic**
Use built-in decoders to analyze HTTP requests and replies, and view the full connection payload as either a hexdump or text.
– **HTTPS/TLS Decryption**
Decrypt encrypted HTTPS traffic and export the **SSLKEYLOGFILE** for further analysis.
– **Traffic Exporting**
Dump the captured traffic to a PCAP file, download it to a browser, or stream it to a remote receiver for real-time analysis (e.g., using Wireshark).
– **Custom Filtering**
Create custom rules to filter out regular traffic and easily spot any anomalies.
– **Geolocation & ASN Lookup**
Identify the country and ASN (Autonomous System Number) of remote servers using offline database lookups.
– **Advanced Features for Rooted Devices**
Capture traffic while other VPN apps are running on rooted devices.
### Paid Features:
– **Firewall**
Create rules to block specific apps, domains, or IP addresses from making network connections.
– **Malware Detection**
Detect malicious connections by leveraging third-party blacklists.
For packet analysis, please refer to the app’s manual for detailed instructions.
### Join the Community:
Get involved with the PCAPdroid community on Telegram to discuss new features and receive updates.