Android - Listen which URLs an app tries to connect

OS Monitor lists network connections by app:

OS Monitor: Connections Connection Tracker
OS Monitor and Connection Tracker listing connections (source: Google Play; click image to enlarge)

As you can see, OS Monitor lists up all connections, and lists the corresponding app "owning" this connection along. This should enable you to see all servers your suspicious app connects to. There are other apps available with the same feature as well, as e.g. Connection Tracker shown in the second screenshot.

If you really need the full URL, the above won't bring you there (both apps use methods similar to netstat, which only reveals the hosts). Instead, you might want to take a look at e.g. tPacketCapture, which "sniffs" your network traffic (without requiring root), and saves the protocol in so called .pcap files. These again can be read then by e.g. Shark Reader.


I have been using Packet Capture app, which for me is simpler than setting-up "wireshark" on Android.

The app is free, doesn't require root access, but may request to install user certificate to decrypt SSL connection (it's using MITM technique, as mentioned on its app page; you don't need to install it if you don't want to know the content of SSL connection)

Usage

  1. Open Packet Capture app
  2. Tap the Play (green triangle) icon to start capturing
  3. While it's active, open the app you want to listen its network activity
  4. Wait until the app finish its network operation
  5. Switch to Packet Capture app, and tap the Stop (red square) icon to stop capturing
  6. Open the log by tapping its entry

Tags:

Networking