-
-
Notifications
You must be signed in to change notification settings - Fork 281
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Question: what are steps that can be taken to figure out what an <UNKNOWN>
could be?
#149
Comments
Hey - So an
I will say that sometimes bandwhich detects its own DNS queries as unknown traffic (because of reason 3). So that might be what you are seeing. You can try running it with the |
Thank you, much appreciated. I'm still seeing UNKNOWNs even after |
Sure. Let me know if there's anything else I can help with. :) |
Same experience. Would it make sense to have a command line argument for changing the polling frequency? |
Is there any other way for doing this than polling using lsof? How do all the firewall products for os x do this kind-of thing? |
Hmm - I'm not sure. When polling, this always has the potential of being a problem, even with a very high polling frequency. So I'm a little hesitant to add lots of complexity in the app to handle this case...
I think the only category-of-a-way around this would be to register to some sort of event that would be fired whenever a process binds itself to a port or releases the port. That way we will never have the discrepancy between the time of polling and the time we logged the packet. Admittedly, I've never looked too deeply into this, because I found that the UNKNOWNs are pretty rare all in all. From what I have seen and heard, this is very much an edge case. That being said, if someone were to investigate this and find a way that would not harm performance, I'd be very interested in discussing an implementation of it. |
Would it be possible to list bandwhich's DNS resolution in the process list? |
Not trivially, I'm afraid. When I want to rule it out, I use the |
What if it spawned a separate process that just handled bandwich’s network requests? |
lsof(8) and OpenZFSCross reference https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=251510#c3 From https://lists.freebsd.org/pipermail/freebsd-current/2020-November/077701.html:
|
First off, thank you for bandwhich.
I'm seeing an
<UNKNOWN>
in my process list and would like to know some ways that could be used to figure out what it could possibly be.The text was updated successfully, but these errors were encountered: