NetiOS Packet Capture FAQ: No Jailbreak, No Computer, HTTPS Decryption & Data Safety
Answers to common questions about packet capture with NetPeek on iPhone, covering requirements, HTTPS decryption, data handling, and capability boundaries.
Does iPhone packet capture require a jailbreak?
No. NetPeek records HTTP/HTTPS traffic through the standard iOS on-device VPN tunnel API, and HTTPS inspection relies only on the standard iOS profile-install and certificate-trust flow. No jailbreak and no system-level modification are involved.
Do I need a computer to capture iPhone traffic?
No. Capture, HTTPS inspection, rewriting, scripts, and replay all run on the iPhone itself. A computer is only involved if you enable MCP so a desktop AI client on the same Wi-Fi LAN or USB link can help analyze captures.
How does NetPeek decrypt HTTPS traffic?
Download the locally generated CA profile in the app, install it under Settings → General → VPN & Device Management, manually enable full trust under Certificate Trust Settings, then add the target host to the MITM list and send a new request. iOS requires explicit user consent at every step.
Is capture data uploaded to a server?
Not by NetPeek. Capture, storage, and analysis stay on the device, and request data isn't sent off by default. Only when you enable MCP and hand its token to an AI client can that client read captures.
Can I capture only one app or one host?
You can filter the request list by host and path to focus on the API under debug, and a swipe shortcut turns any request into a filter. The iOS VPN tunnel captures device-wide, so narrowing happens inside NetPeek.
Can I export captured requests?
Yes. A request can be copied as a cURL command, exported as a HAR file, or turned into a replay you can edit and resend.
Does rewriting traffic modify the app under test?
No. Rewrite rules act purely at the traffic layer — editing headers, replacing bodies, mocking responses, blocking, redirecting, or serving local files — while the target app itself is untouched.
How can AI analyze my captures?
Enable the local MCP service under Settings → NetPeek MCP; compatible clients such as Claude or Codex then use a Bearer token to call 15 capture-analysis tools: searching requests, decoding JWTs, timing waterfalls, security scans, diffing capture runs, and more. The service is off by default.
Is NetPeek a VPN or a proxy for bypassing blocks?
No. Its VPN tunnel loops back on the device solely to record traffic for debugging. It provides no proxy servers, does not change your public IP, and cannot unblock content.