System and method for network traffic aggregation and analysis of mobile devices using socket wrappers

摘要

This disclosure describes systems, methods, and apparatus for per-application network traffic monitoring by extending socket functionality to include socket wrappers able to identify network traffic volume, applications responsible for the traffic, the network being loaded, and distinguish between internal device traffic and external network traffic. Network traffic shaping can then be carried out by managing an offending application's traffic. A disclosed method includes loading a call intercept library prior to loading any core libraries of an operating system, calling a socket wrapper, calling a socket by way of functions of at least one of the core libraries, and receiving at least one data packet, from a responding application external to the communications device, at the socket. The method may also include trapping a call, to read the at least one data packet; and releasing the call to the socket so the data packet is read by the destination application.

主权项

1. A communication apparatus for monitoring applications, the communication apparatus comprising:
a network interface configured to receive a data packet from a network; a memory for storing:
a plurality of core libraries; anda call intercept library; a processor for running:
a library load module configured to load the call intercept library and any of the plurality of core libraries, the call intercept library loaded before any of the plurality of core libraries that were loaded; an application configured to read and process the data packet; a socket based in one of the plurality of core libraries, configured to be called by the application using functionality of one of the plurality of core libraries after the network interface receives the data packet, and to receive the data packet from the network interface; a socket wrapper based in the call intercept library, configured to
trap a call from the application to the socket in order to read the data packet,ascertain a number of bytes in the data packet, andrelease the call to the socket so that the application can read the data packet; and a call analyzer module configured to determine a network traffic load attributable to the application based at least on the number of bytes in the data packet.