package icon

PCAPdroid

No-root network monitor, firewall and PCAP dumper for Android
PCAPdroid is a privacy-friendly open source app which can track, analyze and block the connections made by the other apps on the device.
It can also export a PCAP dump of the traffic, inspect HTTP requests, decrypt TLS traffic and much more.

PCAPdroid simulates a VPN in order to capture the network traffic without root. It does not use a remote VPN server, instead data is processed locally on the device.

Main features:

* Log and analyze the connections made by user and system apps
* Get a summary of how much data each app sent and received
* Low battery usage for continuous, all-day capture
* Extract hosts and IP addresses from DNS, TLS and HTTP
* Record the traffic to PCAP files with additional app metadata
* Send traffic via PCAP-over-IP for real-time analysis (e.g. on Wireshark)
* Decrypt the HTTPS/TLS traffic, extract the URLs and save the SSLKEYLOGFILE
* Inspect the HTTP requests/replies and export them to HAR
* Identify the country and ASN of the remote server via offline DB lookups
* On rooted devices, capture the traffic while other VPN apps are running

If you plan to use PCAPdroid to perform packet analysis, check out the specific section of the manual.

Join the international PCAPdroid community on Telegram or on Matrix.
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 2.0.2 (95) suggested Added on Sep 22, 2026

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 6.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • android.permission.ACCESS_LOCAL_NETWORK
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • view Wi-Fi connections
      Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • android.permission.INTERACT_ACROSS_USERS
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • query all packages
      Allows an app to see all installed packages.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • android.permission.WRITE_CLIPS
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • com.emanuelef.remote_capture.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 16 MiB PGP Signature | Build Log

  • Version 2.0.1 (93) - Added on Sep 12, 2026

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 6.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • android.permission.ACCESS_LOCAL_NETWORK
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • view Wi-Fi connections
      Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • android.permission.INTERACT_ACROSS_USERS
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • query all packages
      Allows an app to see all installed packages.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • android.permission.WRITE_CLIPS
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • com.emanuelef.remote_capture.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 16 MiB PGP Signature | Build Log

  • Version 2.0.0 (92) - Added on Aug 23, 2026

    arm64-v8a armeabi-v7a x86 x86_64

    This version requires Android 6.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • android.permission.ACCESS_LOCAL_NETWORK
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • view Wi-Fi connections
      Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • android.permission.INTERACT_ACROSS_USERS
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • query all packages
      Allows an app to see all installed packages.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • android.permission.WRITE_CLIPS
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • com.emanuelef.remote_capture.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 16 MiB PGP Signature | Build Log

Find Apps