Airtool Pi vs PCAPdroid

Airtool Pi is an iPhone and iPad utility for remote Wi-Fi packet capture. It connects over SSH to Linux-based sensors or Linux endpoints with compatible adapters, starts a capture using selected settings, and saves a PcapNG file locally. Sensors can be added manually or automatically, including WLAN Pi and Oscium Nomad; version history also names WLAN Pi Go and Hamina Clip, and a Raspberry Pi can serve as a sensor. Capture controls include wireless interface, frequency band, channel, channel width, size limits, and an option to discard data-frame payloads. The App Store listing states support for 2.4, 5, and 6 GHz bands and widths from 20 to 320 MHz. Compatible adapters allow simultaneous capture on up to four channels. Files can be shared with Wireshark or another protocol analyzer. Airtool Pi costs $14.99 USD once and requires iOS or iPadOS 18.6 or later.

PCAPdroid is an open-source Android network capture and monitoring tool that works without root privileges. It uses Android VpnService to receive app traffic, then processes it locally without creating an external VPN. Its connection view shows protocol, ports, addresses, status and traffic volume. Captures can be saved as PCAP files or sent remotely for analysis, and the app supports offline trace analysis, display filters and command-line capture. It can decrypt HTTPS/TLS traffic for a specific app, subject to Android certificate trust limitations. The free plan covers core monitoring and capture; paid features add a firewall for blocking apps, domains and IP addresses with configurable rules and allowlists, as well as malware detection using third-party blacklists and PCAPng format. PCAPdroid supports real-time PCAP-over-IP analysis with tools such as Wireshark, ntopng and tcpdump. In non-root mode it captures only outgoing connections started by the device running it, not traffic from other devices on the network. The project says it collects no information and processes traffic locally.