-
Notifications
You must be signed in to change notification settings - Fork 455
HOWTO debugging
This section was designed only for advanced user, developers or users that having special problems e.g. on connectivity related things or simply want to debug AFWall+ very quick.
If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums - revealing personal information such as your e-mail address, telephone number, and address is not recommended.
To get all the logcat messages by AFWall+ run:
adb logcat | grep adb shell ps | grep dev.ukanth.ufirewall | cut -c10-15
AFWall+ itself indicates as AFWall (see TAG) in the logcat.
See also the Android Gradle user guide for more details, including how to use Android Studio to run tests (which provides more useful feedback than the command line).
Of course the following commands must be changed per needs, the interfaces or paths could be named different.
# Example PCap a TCPDump wlan0 interface to external sdcard (e.g. DNS, 443 or ICMPv6)
adb shell tcpdump -ni wlan0 -U -w /sdcard/dump.pcap port 53 or port 443 or icmp6"
# Example PCap on data/local dir that captures a specific host
tcpdump -i br-lan -s0 -U -w /data/local/etherhost.pcap "ether host 34:xx:xx:xx:19:cb
# Example TCPDump that capture everything on ICMP6
tcpdump -ni any -s0 -U -w /sdcard/icmp6.pcap icmp6#su -c 'cat /proc/net/ip_tables_targets'
TRACE
NFQUEUE
NFQUEUE
NFQUEUE
NFLOG <--
CLASSIFY
DNAT
SNAT
CONNMARK
MARK
REJECT
MASQUERADE
ERROR
TCPMSS
TPROXY
TPROXY
REDIRECT
NETMAP
LOG <-- if the LOG-target is not supported by your kernel, it's not listed over here
DNAT
SNAT
...
..
.DNS related (see also DNS thread!)
# NDC sets an dns resolver (100) to a specific host
ndc resolver setnetdns 100 "" 192.168.1.1
# Grep DNS addresses currently in use
adb shell dumpsys connectivity | grep DnsAddresses# Dumpsys connectivity tracker (shows a general overview of all connected devices and advanced network output)
adb shell dumpsys connectivity
#or - does the same except the --diag tag which identify things for error resolving reasons
adb shell dumpsys connectivity --diag
# Greps on the wlan0 interface the current connection status
ip a | grep "wlan0" -A10
# Check IPv6 (99,99% up-time according to Google)
https://ipv6.google.com/
# or IPv4
https://ipv4.google.com/
# Ping (two times -> -c2) the IPv4 Alphabet (alias Google)
adb shell ping6 -c2 ipv4.google.com
# nslookup on e.g. Google
nslookup google.com
# Shows current netstat stats, sorts them and print the ID
netstat -an | awk '{print $6}' | sort | uniq -c | sort -rn
# Shows TetherController output on dnsmasq (acts like a output filter)
adb logcat | egrep '(TetherController|dnsmasq)'
# Shows all devices the the device use
ls /sys/class/net/Allow incoming LAN withing AFWAll+ and ensure the DHCP/DNS/tethering + root is checked
iptables -t nat -A POSTROUTING -j MASQUERADE
#iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
#sysctl -w net.ipv4.ip_forward=1
usb0: inet addr:169.254.0.1 Bcast:169.254.15.255 Mask:255.255.240.0
usb1: inet addr:169.254.16.1 Bcast:169.254.31.255 Mask:255.255.240.0
usb0 169.254.0.2/20 -> Default Gateway is 169.254.0.1 (host's usb0 iface)
Internal: usb0 169.254.16.2/20
Default Gateway 169.254.16.1 (host's usb1 iface)# Show which rules are supported to check e.g. if MASQUERADE is supported
iptables -t nat --list-rules
# Capture every packet and verify it with tcpdump ....
adb shell iptables -t mangle -L idletimer_mangle_POSTROUTING -v && adb shell iptables -t raw -L idletimer_raw_PREROUTING -v
# ... and then run right before the traffic goes in/out tcpdump
adb shell tcpdump | tee tcpdump.log# Shows route
cat /proc/net/routeFooter