AhmedElsagher / iptableslog

Automatically exported from code.google.com/p/iptableslog
Mozilla Public License 2.0
0 stars 0 forks source link

More specific connection information #11

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
Hi,

I do not have a real solution for this problem, but maybe we can setup a 
discussion here.

For some time now I am trying to track down network connections down to single 
PID. This could be interesting for system traffic, as there are quite many apps 
running with PID 0 (root) or -1 (kernel) and still they are creating network 
traffic.

The first approach was 'netstat -pt', which does not work. The /proc/net/tcp(6) 
file does not show PIDs but UIDs, which does not solve the issue. Every process 
has its own directory, but /proc/$PID/net/tcp(6) shows, at least for root, the 
same information as /proc/net/tcp(6). I enclosed the 6 in brackets, as android 
seems to list some connections as TCP6, although I don't think vodafone 
supports IPv6 for me.

Do you have any further ideas to track UID 0 connections?

rob

Original issue reported on code.google.com by luot...@gmail.com on 29 Mar 2012 at 11:53

GoogleCodeExporter commented 8 years ago
I am definitely interested in having the most accurate tracking possible with 
Android.

I too am looking into this as well.

Original comment by pragma78@gmail.com on 31 Mar 2012 at 9:06

GoogleCodeExporter commented 8 years ago

Original comment by pragma78@gmail.com on 31 Mar 2012 at 9:07

GoogleCodeExporter commented 8 years ago
I have identified a minor logic flaw in my packet tracking.  The next release 
should see a significant decrease of packets with UID -1.

Original comment by pragma78@gmail.com on 1 Apr 2012 at 9:30

GoogleCodeExporter commented 8 years ago

Original comment by pragma78@gmail.com on 1 Apr 2012 at 9:31