search

evilsocket / opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
GNU General Public License v3.0
10.74k stars 498 forks source link

Connections made by flatpak apps not tracked #136

Closed abnd90 closed 6 years ago

abnd90 commented 6 years ago

I have spotify installed from flathub. When I open spotify, the app loads up fine but I expect it to make a few connection atleast to stream music. Opensnitch daemon does not seem to track these connections, I do not see the process in the UI as well.

I have the opensnitch installed from git master as of today.

evilsocket commented 6 years ago

-debug logs of the daemon would be useful

abnd90 commented 6 years ago

Here's the logs when I open spotify. Looks like the daemon is not able to map the pid to a process.


[2018-04-13 15:49:20]  DBG  New DNS record: 172.217.0.40 -> www-googletagmanager.l.google.com
[2018-04-13 15:49:20]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> www-googletagmanager.l.google.com:443
[2018-04-13 15:49:20]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:20]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:20]  DBG  New DNS record: 35.186.224.62 -> spclient.wg.spotify.com
[2018-04-13 15:49:20]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:20]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> spclient.wg.spotify.com:443
[2018-04-13 15:49:20]  DBG  New DNS record: 172.217.0.46 -> www-google-analytics.l.google.com
[2018-04-13 15:49:20]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> www-google-analytics.l.google.com:443
[2018-04-13 15:49:20]  DBG  New DNS record: 104.154.127.47 -> weblb-wg.dual-gslb.spotify.com
[2018-04-13 15:49:20]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> weblb-wg.dual-gslb.spotify.com:80
[2018-04-13 15:49:20]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:20]  DBG  New DNS record: 104.154.127.67 -> guc3-accesspoint-b-sk4q.ap.spotify.com
[2018-04-13 15:49:21]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> guc3-accesspoint-b-sk4q.ap.spotify.com:4070
[2018-04-13 15:49:21]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:21]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:21]  DBG  New DNS record: 35.186.224.62 -> spclient.wg.spotify.com
[2018-04-13 15:49:21]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> spclient.wg.spotify.com:443
[2018-04-13 15:49:21]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:21]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:21]  DBG  New DNS record: 157.240.19.19 -> star.c10r.facebook.com
[2018-04-13 15:49:21]  DBG  New DNS record: 2a03:2880:f034:12:face:b00c:0:2 -> star.c10r.facebook.com
[2018-04-13 15:49:21]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> star.c10r.facebook.com:443
[2018-04-13 15:49:21]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.126:8008
[2018-04-13 15:49:21]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.106:8060
[2018-04-13 15:49:21]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.126:8008
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.106:8060
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.106:8060
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.126:8008
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.228:8060
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.228:8060
[2018-04-13 15:49:22]  DBG  New DNS record: 35.186.224.62 -> spclient.wg.spotify.com
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> spclient.wg.spotify.com:443
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.228:8060
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:22]  DBG  New DNS record: 35.186.224.62 -> spclient.wg.spotify.com
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> spclient.wg.spotify.com:443
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:22]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:22]  DBG  New DNS record: 35.186.224.62 -> spclient.wg.spotify.com
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> spclient.wg.spotify.com:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:23]  DBG  New DNS record: 216.58.194.194 -> pagead46.l.doubleclick.net
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> pagead46.l.doubleclick.net:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:23]  DBG  New DNS record: 151.101.52.246 -> beta.spotify.map.fastly.net
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:443
[2018-04-13 15:49:23]  DBG  New DNS record: 151.101.52.246 -> beta.spotify.map.fastly.net
[2018-04-13 15:49:23]  DBG  New DNS record: 151.101.52.246 -> beta.spotify.map.fastly.net
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:443
[2018-04-13 15:49:23]  DBG  New DNS record: 216.58.194.194 -> pagead46.l.doubleclick.net
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> pagead46.l.doubleclick.net:443
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:23]  DBG  New DNS record: 172.217.6.66 -> partnerad.l.doubleclick.net
[2018-04-13 15:49:23]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> partnerad.l.doubleclick.net:443
[2018-04-13 15:49:23]  DBG  New DNS record: 172.217.0.33 -> pagead-googlehosted.l.google.com
[2018-04-13 15:49:24]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> pagead-googlehosted.l.google.com:443
[2018-04-13 15:49:24]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:24]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:24]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:24]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:24]  DBG  New DNS record: 216.58.194.194 -> pagead46.l.doubleclick.net
[2018-04-13 15:49:24]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> pagead46.l.doubleclick.net:443
[2018-04-13 15:49:24]  DBG  Could not find process by its pid 11215 for: 10.159.4.117 (uid:1000) ->(udp)-> 10.150.10.6:53
[2018-04-13 15:49:24]  DBG  New DNS record: 151.101.52.246 -> beta.spotify.map.fastly.net
[2018-04-13 15:49:24]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> beta.spotify.map.fastly.net:80
[2018-04-13 15:49:25]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:25]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:25]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:26]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:26]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80
[2018-04-13 15:49:26]  DBG  Could not find process by its pid 11215 for: 192.168.1.209 (uid:1000) ->(tcp)-> 192.168.1.226:80```
evilsocket commented 6 years ago

distro, etc? i need details to reproduce

abnd90 commented 6 years ago

I don't see how this can be invalid but here goes.

Distro is Arch linux running Linux firefly 4.15.15-1-ARCH #1 SMP PREEMPT Sat Mar 31 23:59:25 UTC 2018 x86_64 GNU/Linux. Flatpak version is Flatpak 0.11.3 installed from the arch linux repos. Spotify was installed from flathub using KDEs "Discover" software center app.

Like I said earlier, compiled and installed opensnitch from github.

evilsocket commented 6 years ago

I asked a question, after 48 hours I did not get a reply, I closed.