Locate Android ARP storms with WireShark and strace
date
Sep 30, 2017
slug
locate-android-arp-storms-with-wireshark-and-strace
status
Published
tags
Android
summary
type
Post
In the past few days, some users have been complaining about Android TV sending a lot of ARP packets. The user use Wireshark to grab packets and found that the TV sends 1000 arp packets in a minute, but can't locate the specific app.
Finally, use
strace -f -p PID | grep sendto and wireshark to locate the process