android最新流量监测源码分享

package com.cqu.android.bean; import java.io.File; import java.io.FileOutputStream; import java.io.IOException; import java.io.InputStream; import java.io.InputStreamReader; import java.io.OutputStreamWriter; import java.util.LinkedList; import java.util.List; import android.app.AlertDialog; import android.content.Context; import android.util.Log; import com.cqu.android.Activity.R; public class FireWall { /** special application UID used to indicate "any application" */ public static final int SPECIAL_UID_ANY = -10; /** special application UID used to indicate the Linux Kernel */ public static final int SPECIAL_UID_KERNEL = -11; /** root script filename */ private static final String SCRIPT_FILE = "droidwall.sh"; private static List<Integer> blackList=new LinkedList<Integer>(); public static void initBlackList(){ } /** * Purge and re-add all rules (internal implementation). * @param ctx application context (mandatory) * @param uidsWifi list of selected UIDs for WIFI to allow or disallow (depending on the working mode) * @param uids3g list of selected UIDs for 2G/3G to allow or disallow (depending on the working mode) * @param showErrors indicates if errors should be alerted */ public static String applyIptablesRulesImpl(Context ctx, List<Integer> uids3g,boolean showErrors) { if (ctx == null) { return ""; } assertBinaries(ctx, showErrors); final String ITFS_3G[] = {"rmnet+","pdp+","ppp+","uwbr+","wimax+","vsnet+"}; //final String ITFS_3G[] = {"rmnet+","pdp+","ppp+","uwbr+"}; final boolean whitelist = false; final boolean blacklist = !whitelist; final StringBuilder script = new StringBuilder(); try { script.append(scriptHeader(ctx)); script.append("" + "$IPTABLES --version || exit 1\n" + "# Create the droidwall chains if necessary\n" + "$IPTABLES -L droidwall >/dev/null 2>/dev/null || $IPTABLES --new droidwall || exit 2\n" + "$IPTABLES -L droidwall-3g >/dev/null 2>/dev/null || $IPTABLES --new droidwall-3g || exit 3\n" + "$IPTABLES -L droidwall-wifi >/dev/null 2>/dev/null || $IPTABLES --new droidwall-wifi || exit 4\n" + "$IPTABLES -L droidwall-reject >/dev/null 2>/dev/null || $IPTABLES --new droidwall-reject || exit 5\n" + "# Add droidwall chain to OUTPUT chain if necessary\n" + "$IPTABLES -L OUTPUT | $GREP -q droidwall || $IPTABLES -A OUTPUT -j droidwall || exit 6\n" + "# Flush existing rules\n" + "$IPTABLES -F droidwall || exit 7\n" + "$IPTABLES -F droidwall-3g || exit 8\n" + "$IPTABLES -F droidwall-wifi || exit 9\n" + "$IPTABLES -F droidwall-reject || exit 10\n" + ""); // Check if logging is enabled script.append("" + "# Create the reject rule (log disabled)\n" + "$IPTABLES -A droidwall-reject -j REJECT || exit 11\n" + ""); script.append("# Main rules (per interface)\n"); for (final String itf : ITFS_3G) { script.append("$IPTABLES -A droidwall -o ").append(itf).append(" -j droidwall-3g || exit\n"); } script.append("# Filtering rules\n"); final String targetRule = (whitelist ? "RETURN" : "droidwall-reject"); final boolean any_3g = uids3g.indexOf(SPECIAL_UID_ANY) >= 0; if (any_3g) { if (blacklist) { /* block any application on this interface */ script.append("$IPTABLES -A droidwall-3g -j ").append(targetRule).append(" || exit\n"); } } else { /* release/block individual applications on this interface */ for (final Integer uid : uids3g) { if (uid >= 0) script.append("$IPTABLES -A droidwall-3g -m owner --uid-owner ").append(uid).append(" -j ").append(targetRule).append(" || exit\n"); } } if (whitelist) { if (!any_3g) { if (uids3g.indexOf(SPECIAL_UID_KERNEL) >= 0) { script.append("# hack to allow kernel packets on white-list\n"); script.append("$IPTABLES -A droidwall-3g -m owner --uid-owner 0:999999999 -j droidwall-reject || exit\n"); } else { script.append("$IPTABLES -A droidwall-3g -j droidwall-reject || exit\n"); } } } else { if (uids3g.indexOf(SPECIAL_UID_KERNEL) >= 0) { script.append("# hack to BLOCK kernel packets on black-list\n"); script.append("$IPTABLES -A droidwall-3g -m owner --uid-owner 0:999999999 -j RETURN || exit\n"); script.append("$IPTABLES -A droidwall-3g -j droidwall-reject || exit\n"); } } final StringBuilder res = new StringBuilder(); Log.v("lck",script.toString()); int code=runScript(ctx, script.toString(), res,40000,true); if(showErrors&&code<0){ alert(ctx, ctx.getResources().getString(R.string.iptables_applyRule_error) + "\n"); } return res.toString(); } catch (Exception e) { } return "error"; } /** * Display a simple alert box * @param ctx context * @param msg message */ public static void alert(Context ctx, CharSequence msg) { if (ctx != null) { new AlertDialog.Builder(ctx) .setNeutralButton(android.R.string.ok, null) .setMessage(msg) .show(); } } /** * Check if we have root access * @param ctx mandatory context * @param showErrors indicates if errors should be alerted * @return boolean true if we have root */ public static boolean hasRootAccess(Context ctx, boolean showErrors) { final StringBuilder res = new StringBuilder(); try { // Run an empty script just to check root access if (runScript(ctx, "exit 0", res,-1,true) == 0) { return true; } } catch (Exception e) { } if (showErrors) { alert(ctx, ctx.getResources().getString(R.string.iptables_hasNotRoot_error) + res.toString()); } return false; } /** * 清除所有规则 * @return 执行结果信息 */ public static boolean purgeIptables(Context ctx, boolean showErrors) { StringBuilder res = new StringBuilder(); try { assertBinaries(ctx,