android.uid.system:1000 connected host - Android Q&A, Help & Troubleshooting

Hi everyone, I'm new in the forum, in fact I don't even know if this is the right section to publish my question, however, I just installed a data monitoring application that also allows you to see which hosts the device connects to, I have examined the majority of them, all legitimate except for the one (10.xx.xx.xx) which seems to be a private address (in my LAN, but in my LAN there is no device with that IP, so much so that if I go to 4G (mobile connection) the IP address remains unchanged and used). So I wanted to ask an opinion from those more experienced than I am about what this address could be. Thanks in advance, I hope you can clarify my doubts.
(Samsung S8+, latest security update, Android 9.0)
Edit: I found out that the IP address is associated with the rmnet0 interface, which I believe is likely to be that of the mobile data, confirmed? (I remove the photo as it indicates my IP)

Related

What [protocol:port]s need to be open for WiFi calling to work?

Guys,
What {protocol : port}s need to be open for WiFi calling to work?
I can see on my home router:
TCP:any -> TCP:5061 - to register with WiFi calling server
UDP:any [high port]-> UDP:any [high port] – to place a call
I’m complete newbie on WiFi calling (and many other things).
Does anything else need to be opened?
Anyway to configure WiFi calling to use some shorter UDP range?
Not everybody is comfortable with opening whole UDP high port range, even if it’s for outgoing & single IP only…
If it’s relevant, I’m on 1.43.531.3
To mod: I did search forums, but there is nothing about exact ports for WiFi calling…
Ports can be whatever you set them to be. It shouldn't matter if your phone is already connected to your home network though
Sent from my HTC_Amaze_4G using XDA
Spastic909 said:
Ports can be whatever you set them to be. It shouldn't matter if your phone is already connected to your home network though
Click to expand...
Click to collapse
Where do I set ports exactly on Amaze?
ApokrifX said:
Guys,
What {protocol : port}s need to be open for WiFi calling to work?
I can see on my home router:
TCP:any -> TCP:5061 - to register with WiFi calling server
UDP:any [high port]-> UDP:any [high port] – to place a call
I’m complete newbie on WiFi calling (and many other things).
Does anything else need to be opened?
Anyway to configure WiFi calling to use some shorter UDP range?
Not everybody is comfortable with opening whole UDP high port range, even if it’s for outgoing & single IP only…
If it’s relevant, I’m on 1.43.531.3
To mod: I did search forums, but there is nothing about exact ports for WiFi calling…
Click to expand...
Click to collapse
Another alternative you can do is set up a static IP for your phone. Make sure you set a IP address that is a bit higher, such as 192.168.0.30 (this is only an example). You want it to be a bit high so DHCP won't accidentally assign the same IP to someone else that you already have. After that, just put your entire phone in DMZ in router settings. Meaning, it would make your phone (with the specific IP address) wide open to the internet, not anyone else.
ALSO, from what I've looked, you will have to open up UDP port 500 and UDP 4500. You don't need to create a range, but just set an individual rule to allow these ports.

Android Mini-PC - help me please !!

Greetings to you all !
Recently i bought an Acer Iconia A1-810 (wich i rooted second two) and a Android Mini-PC QuadCore S400 (Cozyswan). The reason i bought the MiniPC is that i need some small computer as a web-server in my car to provide me two things:
- offline large and detailed maps (very usefull when offroading)
- media server when camping
Now...the MINI-PC must be a server, with an fixed IP address (192.168.1.200 let's say). It also must be some kind of on wi-fi hotspot, for the multimedia server purpose, but has to keep same fixed IP (as gateway) - but i cannot manage to configure it. Also, cannot find an web-server that has "auto-start" feature.
Please note that when offroad, i dont have any kind of internet connection.
So....how can i make that MiniPC to serve those purposes:
a. file server, wich must have "auto-start" feature with a static IP address ?
b. to behave like an wi-fi router
c. if it is possible to manually assign an IP address to the MiniPC, is there any software that can provide me some sort of "remote desktop connection" to the MiniPC ??
Sorry for my poor English and thank you for your input
Chris.

How do I kill mac address randomization?

Fairly generic device running a fairly stock Android 6.0 (it is rooted, though).
Every time it connects to a wireless router, it reports a new mac address (changing the last six digits).
The problem: This device never leaves its home base (it will never connect to an outside router), and I need to forward certain WAN ports from the router to this device. Of course, the router (a brand new Huawei) can only forward by mac address, not by IP address. so each new connection basically requires logging into the router and manually updating its configuration (a time consuming and error-prone process). I could live with a different mac address on each boot (since the device is seldom rebooted), but one with each wifi connection is just too much.
I understand the benefits of random mac addresses for devices that connect to a number of access points, but the implementation (with no user control) feels very Apple like ("We know what's best for you. You have to do it our way, and don't get any choice in the matter").
Is there some way of getting a static mac address when I want one (which for this device, is always)?

IP Whitelist for System to make calls to

Hey all, I turned on google maps (and the location service) on my stock Galaxy S9+ and noticed that the android system was suddenly making some outside calls on the HTTPS port (443). I've blocked them for now, but I was wondering if any of you know if they are ok to let through? The IP addresses are usually 13.249.134.*, going out to an amazon cloudfront server. Is this just how Samsung does some of its updates, or should I be worried about my privacy?
It could be any number of apps or services on your phone doing that. Without knowing which app did it or what it was doing (get, post, etc) was it's not possible to tell you if it's normal or not.
For example on my phone I see an https tunnel connection to 13.56.148.213:443 by Samsung neural keyboard.
I would try to use something to help narrow down what app is connecting to that IP address, and what it is doing in a bit more detail.
I cleared my adguard filter log recently but I will keep an eye on it. Will check on it tomorrow and see if I have any requests going to that IP address range.
**Edit - I don't see anything calling to that specific ip address range, but that doesn't mean anything necessarily. I would strongly suggest you find a way to identify what application is trying to connect to the IP address and what kind of event is taking place (POST, GET, HTTP TUNNEL, etc). Amazon cloudfront server(s) could very well be some form of content delivery service (images and etc), a server for use in backing up configurations/data, or as a way to send data to an app using the closest server to your location (like some sort of content delivery network).
Alright, thanks for your help! Would you happen to know of any good packet sniffers that wouldn't require root access?
StultusNemo said:
Alright, thanks for your help! Would you happen to know of any good packet sniffers that wouldn't require root access?
Click to expand...
Click to collapse
Unfortunately no., and I looked for such an app for a while (over past few months) now.

Randomized MAC address blocks wifi access

Samsung Galaxy S10e, Android 10 stock.
I am currently a patient at an acute care facility and I use the public Wi-Fi here. Recently, changes were made to the Wi-Fi here, I understand that a new router was installed. Since then, I have been trying to access the Wi-Fi with the correct password, but I get a message that sign in is required and when I click it, I am forwarded to a page that does not load. If I select the menu option to use network as is, I seem to be connected but have no access.
In the past, when accessing this Wi-Fi, I was forwarded to a web page where I had to click a button, and then got access. That page has been gone for quite some time now and the Wi-Fi connected without any issues
Others accessing the Wi-Fi do not seem to have this issue. I tried numerous things to fix this issue, such as deleting the Wi-Fi connection and re-enabling it and resetting the network connection. The only thing that I found that resolves this issue is turning off the randomization of the MAC address and setting it to use the phone Mac address.
For privacy reasons, I would prefer to use the randomized MAC address. If for some reason my phone is being blocked on this network, which is the only thing I can think of, in my limited knowledge of how this works, it would seem my phone Mac address would it be blocked but not a randomized MAC address, because it changes.
My old Galaxy S4 running CyanogenMod Android 6 connects to the Wi-Fi fine, but I don't believe the MAC address is randomized on Android 6, if this is the reason, though this seems unlikely to me as every newer phone would have an issue, since they randomize the MAC address by default
Can anyone supply me any info on this?
@rsngfrce
If the randomized MAC address ( e.g. 32:8c:27:26:72:34 ) doesn't contain the original OEM code in its first 6 hex-numbers you might face a lot of authentication issue.
jwoegerbauer said:
@rsngfrce
If the randomized MAC address ( e.g. 32:8c:27:26:72:34 ) doesn't contain the original OEM code in its first 6 hex-numbers you might face a lot of authentication issue.
Click to expand...
Click to collapse
Thanks for your reply. The phone is doing the randomizing as a function of Android and I would have to assume that it would maintain the original OEM code in its first six hex-numbers if this is required (and I have read about that issue). I never had this issue until the new router was installed and I am unaware of anyone else having an issue.

Categories

Resources