Update how_it_works.md

This commit is contained in:
Emanuele Faranda
2021-10-30 19:42:23 +00:00
committed by GitHub
parent fa24d6010d
commit cff85f84ea
+1 -1
View File
@@ -2,7 +2,7 @@ This document complements the [Packet Analysis](https://emanuele-f.github.io/PCA
PCAPdroid uses the VPNService to capture the network traffic. When the VPNService is active, the traffic is routed to the PCAPdroid app,
which implements a L4 proxy to connect it back to the Internet. The VPNService alone alters the traffic because it uses a different subnet and network interface.
Moreover, what you see in PCAPdroid or in the PCAP file isthe traffic which goes from the app to the VPNService, but you cannot see the traffic which goes from the VPNService to the Internet.
Moreover, what you see in PCAPdroid or in the generated PCAP file is the traffic which goes from the app to the VPNService, but you cannot see the traffic which goes from the VPNService to the Internet.
When the app makes a connection, `saddr1:sport1 -> daddr:dport` (the original), PCAPdroid creates a new connection `saddr2:sport2 -> daddr:dport` (the proxied) which goes over the Internet.
The PCAP generated by PCAPdroid only shows the original connection, but if you capture the data on your router you will capture the proxied connection instead.