<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Aptos",serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:"Aptos",serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=DE link="#467886" vlink="#96607D" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span lang=EN-GB>Dear community,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>This is my <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>Setup:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>I am on debian bookworm, uname -r: 6.6.20+rpt-rpi-v8 with NetworkManager –version: 1.42.4<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>My wwan device is a ID 1e0e:9001 Qualcomm / Option SimTech SIM7000 with <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>udev rule: ACTION=="add", SUBSYSTEM=="net", ATTR{qmi/raw_ip}=="*", ATTR{qmi/raw_ip}="Y"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>The NetworkManager connection <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>nmcli connection add type gsm ifname '*' con-name 'test' apn 'iot.1nce.net' \n<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>connection.autoconnect yes \n<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>connection.lldp 0 \n<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>ipv6.method disabled \n<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>gsm.mtu 1200<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>is successful: Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/8)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>and ifconfig reports:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>wwan0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1200<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB> inet 10.238.250.1 netmask 255.255.255.252 destination 10.238.250.1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB> unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 1000 (UNSPEC)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB> RX packets 0 bytes 0 (0.0 B)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB> RX errors 0 dropped 0 overruns 0 frame 0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB> TX packets 1028 bytes 426040 (416.0 KiB)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB> TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>After setting up the appropriate routing table – not shown here – I can send and receive udp datagrams.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>This is my<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>Problem I am asking for help:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>tcpdump -vv -i wwan0 shows this output (excerpt):<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>….<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>22:50:22.477131 IP (tos 0x0, ttl 1, id 54018, offset 0, flags [DF], proto UDP (17), length 419)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB> 10.238.250.1.2053 > 239.2.1.1.2053: [udp sum ok] UDP, length 391<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>22:50:32.481315 IP (tos 0x0, ttl 1, id 54239, offset 0, flags [DF], proto UDP (17), length 419)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB> 10.238.250.1.2053 > 239.2.1.1.2053: [udp sum ok] UDP, length 391<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>…<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Some “process” is sending every 10 seconds traffic over wwan0.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>How can identify the “process” and stop the traffic?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Regards<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB>Christian<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p></div></body></html>