Doesnt seem to show link local, multicast type traffic.

[chrcoluk]

Trying to find whats triggering my phone to keep broadcasting mdns, igmp, multicast type traffic, but when I enable the monitoring, only internet routed traffic seems present.

[emanuele-f]

In non-root mode PCAPdroid creates a network interface and sets up routes to direct the traffic to it, which includes multicast adddresses. However, Android may still use your real interface for some local traffic, see #359 for a somehow related question.

For full visibility on the device traffic, you need a rooted device. Then you can use the root capture in PCAPdroid.

Note: anyway, such traffic is usually generated by system services, which could be activated by userspace apps via specific APIS, but because of this, it won't be easy to determine the source of this traffic