emanuele-f / PCAPdroid

No-root network monitor, firewall and PCAP dumper for Android
https://emanuele-f.github.io/PCAPdroid
GNU General Public License v3.0
2.08k stars 260 forks source link

Improve full payload mode #398

Open emanuele-f opened 5 months ago

emanuele-f commented 5 months ago

The current implementation of the full payload option is quite limiting, as it's almost "all or nothing". With the introduction of the decryption rules, since the TLS decryption can now happen during normal monitoring, it's often necessary to review some decrypted data in full while avoiding the app from going out of memory because of the full payload.

In essence we need a more dynamic approach, here are some ideas:

narumi147 commented 4 months ago

For local storage backend, I have been using Stream on iOS to do sniffing, it's easy to save and review history data, maybe you can have a try to get some inspiration.