celzero / rethink-app

DNS over HTTPS / DNS over Tor / DNSCrypt client, WireGuard proxifier, firewall, and connection tracker for Android.

https://rethinkfirewall.com/

Apache License 2.0

2.64k stars 135 forks source link

More Wire Statistics #98

Open ignoramous opened 3 years ago

ignoramous commented 3 years ago

[ ] Was SNI bypass required for 443? It so, for which conn / uid / network?
[x] Was conn dropped? When, who, on which network? (done: v055)
[ ] Overall network throughput, latency, and jitter. Max / min / median etc Ref: speed.cloudflare.com
[x] Per app data usage, bandwidth consumption at a given point in time, total connections made etc (done: v055)

53 #42 #308

ignoramous commented 3 years ago

Ref: M66B/NetGuard/blob/5b53dd32/eu/faircode/netguard/ServiceSinkhole.java#L909-L1119.

obeho commented 3 years ago

Bandwidth Usage Monitor should be the top priority here. First, a very crude version: amount of data consumed per app, in the past hour, day, week, month, like in Glasswire.

Then, a real-time monitor, coz many times I see some 1.6 MBps speed on the network, but when I open logs, several apps would be making connections, and I feel restricted suddenly, as I'm unable to find out which app is consuming that much data.

ignoramous commented 3 years ago

Refs:

KLL-Sketch: https://datasketches.apache.org/docs/Quantiles/KLLSketch.html
T-Digest: https://github.com/tdunning/t-digest
DD-Sketch: https://github.com/DataDog/sketches-java

ignoramous commented 1 year ago

Added some wire stats in v053m:

Most blocked / allowed apps => opens up => per-app network logs grouped by IPs
Most blocked / allowed IPs => opens up => network log with all connections made to the IP
Most blocked / allowed domains => opens up => dns log with all answers for the domain

Hear that it is pretty rad.

https://twitter.com/rethinkdns/status/1613303426070515712

https://user-images.githubusercontent.com/852289/212083102-0d80f793-0f23-4dcb-b177-6babbf9036f1.mp4

ignoramous commented 1 year ago

Per app data usage, bandwidth consumption at a given point in time, total connections made etc

network engine changes done as one part of https://github.com/celzero/firestack/commit/456491ac0ac884481f5bc14431fdfcc0f0aaec9c ui changes pending.

ignoramous commented 10 months ago

Per app data usage, bandwidth consumption at a given point in time, total connections made etc

Was conn dropped? When, who, on which network?

Both these shipped in v055.