A-Packets vs PCAPdroid

A-Packets analyzes PCAP and PCAPNG captures for incident response, forensics and protocol inspection. It reconstructs HTTP sessions, maps communicating hosts and services, examines wireless artifacts, extracts files, identifies credential exposure and flags suspicious events. The hosted analyzer accepts native capture files from tools such as Wireshark and tcpdump. Public analysis costs nothing, requires no signup and accepts uploads up to 25 MB, but the resulting page is public. Private workspace plans include reports and a REST API key: Starter Workspace (monthly) is $11.99 a month, Professional (monthly) is $24.99 a month, and Advanced (monthly) is $49.99 a month. Yearly workspaces are $99 a year, $199 a year and $399 a year, respectively. One-time packs cost $14.99 as a one-time purchase, $44.99, paid once or $99.99, paid once. Subscription analyses have permanent private storage; credit-pack reports are deleted after 30 days. OnPrem supports customer-controlled storage and air-gapped deployments, but analyzes captures case by case and does not decrypt TLS payloads, capture continuously or alert.

PCAPdroid is an Android app that captures, analyzes, and can block connections made by other apps. It uses Android VpnService without root, processes traffic locally, and does not create an external VPN. Logs show user and system app connections with protocol, remote host or IP, status, and traffic volume. Captures can be saved as PCAP, served through HTTP, or sent over PCAP-over-IP for real-time analysis. For a selected app, PCAPdroid can decrypt HTTPS/TLS traffic, inspect HTTP requests and replies, and export them to HAR. The free plan includes capture, monitoring, PCAP export, TLS decryption, and HTTP inspection. Paid features include a firewall, malware detection, and PCAPng format, with no price listed. Malware detection uses third-party blacklists and is active only during capture. The app requires Android 6.0 or newer.