PCAPdroid vs Rethink: DNS + Firewall + VPN
Side-by-side comparison of two open source alternatives
PCAPdroid
PCAPdroid is a privacy-friendly app which lets you track and analyze the connections made by the other apps in your device. It also allows you to export a PCAP dump of the traffic, inspect HTTP, decrypt TLS traffic and much more. PCAPdroid simulates a VPN in order to capture the network traffic without root. It does not use a remote VPN server, instead data is processed locally on the device. Features: * Log and examine the connections made by user and system apps * Extract the SNI, DNS query, HTTP URL and the remote IP address * Inspect HTTP requests and replies thanks to the built-in decoders * Inspect the full connections payload as hexdump/text * Decrypt the HTTPS/TLS traffic and export the SSLKEYLOGFILE * Dump the traffic to a PCAP file, download it from a browser, or stream it to a remote receiver for real-time analysis (e.g. Wireshark) * Create rules to filter out the good traffic and easily spot anomalies * Identify the country and ASN of remote server via offline DB lookups * On rooted devices, capture the traffic while other VPN apps are running If you plan to use PCAPdroid to perform packet analysis, please check out the specific section of the manual. Join the PCAPdroid international community on Telegram or on Matrix.
Rethink: DNS + Firewall + VPN
Say hello to a safer, transparent, and secure Android. VPN: Connects to multiple WireGuard VPNs of your choice. Safe: Reveals network activity of installed apps and lets you disable, uninstall, or firewall them. Secure: First line of defense against spyware, ransomware, and malware that steal personal information and takeover accounts. Protects from DNS manipulation typically employed to censor websites, social media, and messaging apps. Fast: DNS Servers deployed to 300+ locations world-wide to ensure your internet is as fast and highly available as it can be. Open: Open source and free of any trackers. ***Features*** Firewall: Prevent apps from connecting to the Internet. Block spyware, malware, ransomware and more. A firewall blocks any app connecting to the Internet over WiFi or Mobile data. Since most forms of surveillance require the data to be sent the network to a server, firewalling them effectively mitigates the threat (File Managers, Alarm Clock, Calculator are few such examples of apps that do not require any Internet access to function). The firewall feature uses Accessibility Service to detect and firewall background applications. Monitoring: Keep tabs on incoming and outgoing Internet traffic. If enabled, the connectivity logs are collected and analyzed. Automated reports flag previously unknown or suspicious connections, and reveal the extent of attempt to steal data by spyware networks. In our tests, around 60% of the traffic is flagged and reported as being initiated by known spyware. Logs generated are made available in near-real time to the user for their own analysis. WireGuard: Secure outgoing Internet traffic. The app uses fast, modern, light-weight, and secure WireGuard protocol to encrypt outgoing connections to any compatible VPN provider of your choice. Anti-censorship: The app encrypts your internet connection to Domain Name System (DNS) server run by Rethink with presence in our 300+ locations world-wide. DNS servers are the address book of the internet: A DNS server provides the exact addresses you need to visit a website or open an app. Data Monitor: Track per-app and per-connection Mobile or WiFi data usage.
| Feature | PCAPdroid | Rethink: DNS + Firewall + VPN |
|---|---|---|
| License | GPL-3.0-or-later | Apache-2.0 |
| Install sources | F-DroidGitHub | F-DroidGitHub |
| Categories | Password ManagerDev ToolsBrowser | Password ManagerVPNFirewallDev ToolsMessagingBrowser |
| Features | Ad-FreeOpen SourceNo Tracking | Ad-FreeOpen SourceNo Tracking |
| Platforms | Android | Android |
| Website | ||
| Source code |