<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:monospace">On Mon, Apr 1, 2024 at 4:31 AM <<a href="mailto:christian.kaiser@messagerie.de">christian.kaiser@messagerie.de</a>> wrote: </div></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-5019654935057222245"><div lang="DE" style="overflow-wrap: break-word;"><div class="m_-5019654935057222245WordSection1">Dear community,This is my Setup:I am on debian bookworm, uname -r: 6.6.20+rpt-rpi-v8 with NetworkManager –version: 1.42.4My wwan device is a ID 1e0e:9001 Qualcomm / Option SimTech SIM7000 with udev rule: ACTION=="add", SUBSYSTEM=="net", ATTR{qmi/raw_ip}=="*", ATTR{qmi/raw_ip}="Y"The NetworkManager connection nmcli connection add type gsm ifname '*' con-name 'test' apn '<a href="http://iot.1nce.net" target="_blank">iot.1nce.net</a>' \nconnection.autoconnect yes \nconnection.lldp 0 \nipv6.method disabled \ngsm.mtu 1200is successful: Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/8)and ifconfig reports:wwan0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1200 inet 10.238.250.1 netmask 255.255.255.252 destination 10.238.250.1 unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 1000 (UNSPEC) RX packets 0 bytes 0 (0.0 B) RX errors 0 dropped 0 overruns 0 frame 0 TX packets 1028 bytes 426040 (416.0 KiB) TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0After setting up the appropriate routing table – not shown here – I can send and receive udp datagrams. This is myProblem I am asking for help:tcpdump -vv -i wwan0 shows this output (excerpt):….22:50:22.477131 IP (tos 0x0, ttl 1, id 54018, offset 0, flags [DF], proto UDP (17), length 419) 10.238.250.1.2053 > 239.2.1.1.2053: [udp sum ok] UDP, length 39122:50:32.481315 IP (tos 0x0, ttl 1, id 54239, offset 0, flags [DF], proto UDP (17), length 419) 10.238.250.1.2053 > 239.2.1.1.2053: [udp sum ok] UDP, length 391… Some “process” is sending every 10 seconds traffic over wwan0. How can identify the “process” and stop the traffic?</div></div></div></blockquote><div> </div><div>netstat --help </div><div> -p, --programs display PID/Program name for sockets </div><div> </div><div><div class="gmail_default" style="font-family:monospace">So - `netstat -p | grep 2053 | grep 239.2.1.1` will give you the pid of the program sending traffic to 239.2.1.1 on port 2053</div> </div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-5019654935057222245"><div lang="DE" style="overflow-wrap: break-word;"><div class="m_-5019654935057222245WordSection1"> RegardsChristian </div></div></div></blockquote></div></div>