mirror of
https://github.com/emanuele-f/PCAPdroid.git
synced 2026-05-08 21:12:26 +00:00
Update how_it_works.md
This commit is contained in:
@@ -2,7 +2,7 @@ This document complements the [Packet Analysis](https://emanuele-f.github.io/PCA
|
||||
|
||||
PCAPdroid uses the VPNService to capture the network traffic. When the VPNService is active, the traffic is routed to the PCAPdroid app,
|
||||
which implements a L4 proxy to connect it back to the Internet. The VPNService alone alters the traffic because it uses a different subnet and network interface.
|
||||
Moreover, what you see in PCAPdroid or in the PCAP file isthe traffic which goes from the app to the VPNService, but you cannot see the traffic which goes from the VPNService to the Internet.
|
||||
Moreover, what you see in PCAPdroid or in the generated PCAP file is the traffic which goes from the app to the VPNService, but you cannot see the traffic which goes from the VPNService to the Internet.
|
||||
|
||||
When the app makes a connection, `saddr1:sport1 -> daddr:dport` (the original), PCAPdroid creates a new connection `saddr2:sport2 -> daddr:dport` (the proxied) which goes over the Internet.
|
||||
The PCAP generated by PCAPdroid only shows the original connection, but if you capture the data on your router you will capture the proxied connection instead.
|
||||
|
||||
Reference in New Issue
Block a user