Thursday, July 19, 2012

Mysterious Android connectivity

I noticed my phone was constantly downloading when connected to my work's "guest" wifi (which is known to block ports).

Further investigation with netcfg on the device revealed an https connection to Facebook:
tcp6       0      0 ::ffff:myip:50498 ::ffff:69.171.234.22:443 ESTABLISHED

This resolves to:
69.171.234.22
api-read-slb-10-08-prn1.facebook.com

And two further half open connections:
tcp6       1      0 ::ffff:myip:33008 ::ffff:74.125.132.188:5228 SYN_SENT
tcp6       0      0 ::ffff:myip:50067 ::ffff:176.34.110.161:5223 SYN_SENT

These resolve to:
74.125.132.188:5228 
wb-in-f188.1e100.net (Google - 1e100 is a Googol)
176.34.228.161:5223
ec2-176-34-228-161.eu-west-1.compute.amazonaws.com

Do those ports fall within the blocked port range?

The Amazon connection could be anything that uses the Amazon S3 cloud; I'm using Dropbox, Netflix, Spotify and ChatOn (hmm, see ChatOn grumble) at the moment.

Unknown listeners

There are, however, several unknown processes waiting for a connection:
tcp       0      0 127.0.0.1:7203         0.0.0.0:*              LISTEN
tcp       0      0 127.0.0.1:16714        0.0.0.0:*              LISTEN
tcp       0      0 127.0.0.1:32500        0.0.0.0:*              LISTEN
tcp6       0      0 ::ffff:127.0.0.1:38573 :::*                   LISTEN

Resources

* http://android.stackexchange.com/questions/6851/how-can-i-uninstall-applications-that-are-locked-by-phone-vendor
* http://wiki.cyanogenmod.com/wiki/Barebones
(Continued http://viandroid.blogspot.co.uk/2012/09/mysterious-android-connectivity-part-2.html)

1 comment:

  1. 69.171.234.22 this connection's failed.. i dont know what's the problem.. please fix it. thanks!. :)

    ReplyDelete