[WIP]安卓吃鹅记录 updated on 2025-3-5 #263

pomhg · 2023-08-05T19:53:50Z

pomhg
Aug 5, 2023

pixel 8今天更新到A15 QPR2，内核6.1.99。默认编译参数还是缺少CONFIG_BPF_STREAM_PARSER=y，似乎dae后面的改动比较多，目前会出下图的错误，需要熟悉android开发的佬看看如何解决。

-----------分割线-----------
现版本dae需要kernel大于5.17才能支持bpf_loop，安卓主线是5.10、5.15、6.1，6.1内核目前只在pixel 9系列上搭载，pixel 8大概需要等到A15 QPR2，所以目前手头的机器没办法继续测试。国产品牌机器内核版本不太清楚，不知道是否有6.1的机器。（开放内核源码和可以root的机器大概只有小米和oneplus？）

-----------分割线-----------
由于系统和内核差别很大，我碰到的坑你不一定会碰到，或者你会有新的坑。

编译dae需要下载android-ndk，编译时指定CGO_ENABLED=1 GOOS=android GOARCH=arm64 CC=/path/to/android-ndk-xxx/path/to/aarch64-linux-androidXX-clang

吃鹅需要满足文档中的内核要求，且要绑定接口需要内核版本大于5.8，安卓默认内核似乎都不满足条件，所以需要自行编译，且编译时可以顺便把KernelSU一起弄进去，大于5.8的安卓内核有5.10、5.15及6.1几个分支，意味着你的设备是GKI 2.0，我测试的有两个，出厂内核分别是android12-5.10(Zenfone9)、android13-5.10(Pixel 7a)（和你现在的系统无关，出厂内核KMI一般不变，具体参照KernelSU文档）。

common-android12-5.10分支及zf9自带内核默认开启了大部分需要的内核参数，但是缺少BPF_STREAM_PARSER=y和DEBUG_INFO_BTF=y，android13-5.10默认编译DEBUG_INFO_BTF=y，建议直接拿新设备尝试。

编译GKI内核主要参照官方文档 Building Kernels ，开启DEBUG_INFO_BTF=y编译common-android12-5.10分支内核可以参照安卓通用内核编译零碎记录，博文中的坑我都碰到了，在打上 [bpf-next] libbpf: stop using feature-detection Makefiles 中提到的patch后可以顺利编译到最后一步，具体参见博文，博文中最后成功编译可以出Image改boot.img刷入，但是我这里尝试各种改动都无法成功，会卡在最后一步生成vmlinux.btf，错误出在pahole，即使编译环境中link-vmlinux.sh里面已经有额外的${PAHOLE_FLAGS}，依旧会出错，自行加入参数会提示option unrecognized然后编译失败。

如果是按照 BTFHubForAndroid 的步骤只会生成带btf的vmlinux。

如果是common-android13-5.10分支，只用默认内核缺少BPF_STREAM_PARSER=y在android上运行dae会提示FATA[00001 load eBPF objects: field TproxyLanIngress: program tproxy_lan_ingress: map listen_socket_map: map create: invalid argument (without BTF k/v)，具体编译参照官方编译文档或者Building Pixel 7 AOSP and Android Kernel，基本就是KernelSU部署+make menuconfig后编译内核，android13内核用bazel编译或者pixel设备用build.sh编译会默认生成boot.img，关于如何生成boot.img在google的官网文档有说明。

现在你有了一个符合条件的带KernelSU的内核，dae终于可以成功运行，下图的config.dae是最小配置：

为了代理本机所以需要绑定wan接口，主要是数据接口rmnetX以及无线网接口wlanX，wan_interface: auto不会报错但是日志无任何流量信息，wan_interface写定上述任一接口会出现如下错误：

目前进展就到这里。

mzz2017 · 2023-08-06T05:42:51Z

mzz2017
Aug 6, 2023
Maintainer

报错点是为了支持 pname，注释：

dae/control/control_plane.go

Lines 214 to 216 in 7ef8205

    
           if err = core.setupSkPidMonitor(); err != nil { 
        
           	return nil, err 
        
           }

再重新编译看看！

1 reply

pomhg Aug 6, 2023
Author

注释掉这三行后重新编译运行可过上图中的CGroup Attach错误，目前可以刷到流量日志。大概是本身dns环境有问题，会持续出no dialer错误。

pomhg · 2023-08-06T15:17:35Z

pomhg
Aug 6, 2023
Author

目前使用fix_android分支dae可以正常运行，测试绑定wlan0接口，似乎dns或者udp连通性有问题，折中方案是配置文件里面用domain++，routing加一条l4proto(udp) && dport(53) -> must_direct，节点需要使用tcp节点非纯udp节点，分流和解析都正常，体验上基本上和电脑无差。

0 replies

pomhg · 2023-08-07T18:03:46Z

pomhg
Aug 7, 2023
Author

新一轮测试，fix_android分支，绑定wlan0端口，纯udp节点也可使用，分流、日志正常，domain模式，routing加一句l4proto(udp) -> must_direct即可。

配置文件如下：

global {
    log_level: debug
    disable_waiting_network: false

    wan_interface: wlan0

    auto_config_kernel_parameter: true

    tcp_check_url: 'http://cp.cloudflare.com,1.1.1.1,2606:4700:4700::1111'
    tcp_check_http_method: HEAD
    udp_check_dns: 'dns.google.com:53,8.8.8.8,2001:4860:4860::8888'
    check_interval: 30s
    check_tolerance: 50ms

    dial_mode: domain
    allow_insecure: false
    sniffing_timeout: 1000ms
    tls_implementation: tls
}

subscription {
}

node {
    icu: 'juicity://xxx'
    cc: 'juicity://xxx'
}

dns {
    upstream {
        alidns: 'udp://dns.alidns.com:53'
        googledns: 'tcp+udp://dns.google.com:53'
    }
    routing {
        request {
            qname(geosite:category-ads-all) -> reject
            qname(geosite:cn) -> alidns
            fallback: googledns
        }
    }
}

group {
    proxy {
        filter: name(icu,cc)
        policy: min_avg10
    }
}

routing {
    dip(224.0.0.0/3, 'ff00::/8') -> direct
    dip(geoip:private) -> direct
    l4proto(udp) -> must_direct
    
    domain(geosite:category-ads-all) -> block
    domain(suffix:googleapis.cn) -> proxy
    dip(geoip:cn) -> direct
    domain(geosite:cn) -> direct

    fallback: proxy
}

日志如下：

[Aug 07 18:02:55] DEBUG Rewrite dial target to domain from=46.105.200.68:443 to=ovh-cdn.perfops.io:443
[Aug 07 18:02:55]  INFO localhost:60190 <-> 46.105.200.68:443 dialer=block ip=46.105.200.68:443 mac=74:74:46:b0:88:11 network=tcp4 outbound=block pid=0 pname= policy=fixed sniffed=ovh-cdn.perfops.io
[Aug 07 18:02:55]  WARN handleConn: failed to dial 46.105.200.68:443: use of closed network connection
[Aug 07 18:02:55] DEBUG Rewrite dial target to domain from=143.244.50.212:443 to=testvideo.b-cdn.net:443
[Aug 07 18:02:55] DEBUG Rewrite dial target to domain from=143.244.50.212:443 to=testvideo.b-cdn.net:443
[Aug 07 18:02:55]  INFO localhost:38762 <-> testvideo.b-cdn.net:443 dialer=icu ip=143.244.50.212:443 mac=74:74:46:b0:88:11 network=tcp4 outbound=proxy pid=0 pname= policy=min_avg10 sniffed=testvideo.b-cdn.net
[Aug 07 18:02:55] DEBUG Rewrite dial target to domain from=[2402:6800:2:12:207:43ff:fe4e:cbe0]:443 to=perfops-ic-cebeea00-0a73f3-a4x.s.loris.llnwd.net:443
[Aug 07 18:02:55] DEBUG Rewrite dial target to domain from=[2402:6800:2:12:207:43ff:fe4e:cbe0]:443 to=perfops-ic-cebeea00-0a73f3-a4x.s.loris.llnwd.net:443
[Aug 07 18:02:55]  INFO localhost:48198 <-> perfops-ic-cebeea00-0a73f3-a4x.s.loris.llnwd.net:443 dialer=cc ip=[2402:6800:2:12:207:43ff:fe4e:cbe0]:443 mac=74:74:46:b0:88:11 network=tcp6 outbound=proxy pid=0 pname= policy=min_avg10 sniffed=perfops-ic-cebeea00-0a73f3-a4x.s.loris.llnwd.net
[Aug 07 18:02:55] DEBUG Rewrite dial target to domain from=151.101.128.207:443 to=1691431374801-goamsm3n4u.u.fastly-analytics.com:443
[Aug 07 18:02:55] DEBUG Rewrite dial target to domain from=151.101.128.207:443 to=1691431374801-goamsm3n4u.u.fastly-analytics.com:443
[Aug 07 18:02:55]  INFO localhost:60074 <-> 1691431374801-goamsm3n4u.u.fastly-analytics.com:443 dialer=icu ip=151.101.128.207:443 mac=74:74:46:b0:88:11 network=tcp4 outbound=proxy pid=0 pname= policy=min_avg10 sniffed=1691431374801-goamsm3n4u.u.fastly-analytics.com
[Aug 07 18:02:55]  INFO localhost:37924 <-> 85.10.196.124:443 dialer=icu ip=85.10.196.124:443 mac=74:74:46:b0:88:11 network=tcp4 outbound=proxy pid=0 pname= policy=min_avg10 sniffed=169143137480112axpitfuqvsukkawww.edns.ip-api.com
[Aug 07 18:02:57] DEBUG Rewrite dial target to domain from=85.10.196.124:443 to=1691431376790zuxt5vlgwesukkawwww.edns.ip-api.com:443
[Aug 07 18:02:57] DEBUG Rewrite dial target to domain from=85.10.196.124:443 to=1691431376790zuxt5vlgwesukkawwww.edns.ip-api.com:443
[Aug 07 18:02:57]  INFO localhost:37936 <-> 1691431376790zuxt5vlgwesukkawwww.edns.ip-api.com:443 dialer=icu ip=85.10.196.124:443 mac=74:74:46:b0:88:11 network=tcp4 outbound=proxy pid=0 pname= policy=min_avg10 sniffed=1691431376790zuxt5vlgwesukkawwww.edns.ip-api.com
[Aug 07 18:02:57]  INFO localhost:40258 <-> 151.101.192.207:443 dialer=icu ip=151.101.192.207:443 mac=74:74:46:b0:88:11 network=tcp4 outbound=proxy pid=0 pname= policy=min_avg10 sniffed=1691431376722-ptf0z5psqs.u.fastly-analytics.com
[Aug 07 18:02:59] DEBUG Rewrite dial target to domain from=151.101.128.207:443 to=1691431378466-72bhni2ztw7.u.fastly-analytics.com:443
[Aug 07 18:02:59] DEBUG Rewrite dial target to domain from=151.101.128.207:443 to=1691431378466-72bhni2ztw7.u.fastly-analytics.com:443
[Aug 07 18:02:59]  INFO localhost:60080 <-> 1691431378466-72bhni2ztw7.u.fastly-analytics.com:443 dialer=icu ip=151.101.128.207:443 mac=74:74:46:b0:88:11 network=tcp4 outbound=proxy pid=0 pname= policy=min_avg10 sniffed=1691431378466-72bhni2ztw7.u.fastly-analytics.com
[Aug 07 18:02:59] DEBUG Rewrite dial target to domain from=85.10.196.124:443 to=1691431378685i31dasqtv4gsukkawww.edns.ip-api.com:443
[Aug 07 18:02:59] DEBUG Rewrite dial target to domain from=85.10.196.124:443 to=1691431378685i31dasqtv4gsukkawww.edns.ip-api.com:443
[Aug 07 18:02:59]  INFO localhost:37946 <-> 1691431378685i31dasqtv4gsukkawww.edns.ip-api.com:443 dialer=icu ip=85.10.196.124:443 mac=74:74:46:b0:88:11 network=tcp4 outbound=proxy pid=0 pname= policy=min_avg10 sniffed=1691431378685i31dasqtv4gsukkawww.edns.ip-api.com
[Aug 07 18:03:01]  INFO localhost:59518 <-> 151.101.128.207:443 dialer=icu ip=151.101.128.207:443 mac=74:74:46:b0:88:11 network=tcp4 outbound=proxy pid=0 pname= policy=min_avg10 sniffed=1691431380310-66xylu6bhjf.u.fastly-analytics.com
[Aug 07 18:03:01] DEBUG Rewrite dial target to domain from=85.10.196.124:443 to=1691431380700i4wo7huww9sukkawwww.edns.ip-api.com:443

0 replies

pomhg · 2023-08-07T18:20:17Z

pomhg
Aug 7, 2023
Author

目前看关键在于udp -> must_direct，dial_mode=ip拿不到dns，domain系列都可以，没有前面那个routing就像mzz佬说的udp不通，tcpdump -i wlan0 udp没有任何输出，加上那一句则输出正常。

测试下来目前基本可用，电脑配置拿来加一句routing即可。

netstat -lpn:

Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 0.0.0.0:8022            0.0.0.0:*               LISTEN      326/sshd            
tcp6       0      0 :::8022                 :::*                    LISTEN      326/sshd            
tcp6       0      0 127.0.0.1:39383         :::*                    LISTEN      15203/com.google.an 
Active UNIX domain sockets (only servers)
Proto RefCnt Flags       Type       State         I-Node   PID/Program name     Path
unix  2      [ ACC ]     STREAM     LISTENING     66438    1930/webview_zygote  @com.android.internal.os.WebViewZygoteInit/ed179fd4-77e8-4d57-aac5-32f7b250f197
unix  2      [ ACC ]     STREAM     LISTENING     15801    1155/storage_isolat  @tHBzoF7ClLUn
unix  2      [ ACC ]     SEQPACKET  LISTENING     39617    610/tombstoned       /dev/socket/tombstoned_crash
unix  2      [ ACC ]     STREAM     LISTENING     944605   14691/com.android.c  @chrome_devtools_remote
unix  2      [ ACC ]     SEQPACKET  LISTENING     39618    610/tombstoned       /dev/socket/tombstoned_intercept
unix  2      [ ACC ]     SEQPACKET  LISTENING     39619    610/tombstoned       /dev/socket/tombstoned_java_trace
unix  2      [ ACC ]     STREAM     LISTENING     44183    755/netd             /dev/socket/dnsproxyd
unix  2      [ ACC ]     STREAM     LISTENING     44185    755/netd             /dev/socket/fwmarkd
unix  2      [ ACC ]     STREAM     LISTENING     46155    756/zygote64         /dev/socket/zygote
unix  2      [ ACC ]     STREAM     LISTENING     46156    756/zygote64         /dev/socket/usap_pool_primary
unix  2      [ ACC ]     STREAM     LISTENING     66070    797/android.hardwar  /data/vendor/hal_neuralnetworks_darwinn/NnapiHalSocketHalProcess
unix  2      [ ACC ]     STREAM     LISTENING     63088    1601/android.hardwa  /data/vendor/hal_neuralnetworks_darwinn/NnapiHalSocketSpawnerProcess
unix  2      [ ACC ]     STREAM     LISTENING     47447    897/traced           /dev/socket/traced_consumer
unix  2      [ ACC ]     STREAM     LISTENING     47448    897/traced           /dev/socket/traced_producer
unix  2      [ ACC ]     SEQPACKET  LISTENING     48539    998/chre             /dev/socket/chre
unix  2      [ ACC ]     SEQPACKET  LISTENING     61839    1006/adbd            /dev/socket/adbd
unix  2      [ ACC ]     STREAM     LISTENING     65345    1525/system_server   /data/system/ndebugsocket
unix  2      [ ACC ]     STREAM     LISTENING     33180    1/init               /dev/socket/property_service
unix  2      [ ACC ]     STREAM     LISTENING     581142   18435/bin.mt.plus    @bin.mt.plus-2440077
unix  2      [ ACC ]     STREAM     LISTENING     521      1065/bin/zygiskd64   @zygiskd64289a59acbf70ae16df
unix  2      [ ACC ]     STREAM     LISTENING     34187    1063/bin/zygiskd32   @zygiskd32289a59acbf70ae16df
unix  2      [ ACC ]     STREAM     LISTENING     48603    1009/bin/zygiskwd    @zygiskwd289a59acbf70ae16df
unix  2      [ ACC ]     SEQPACKET  LISTENING     61259    1006/adbd            @jdwp-control
unix  2      [ ACC ]     STREAM     LISTENING     944588   14758/com.android.c  @com.android.internal.os.AppZygoteInit/319ff9a7-186e-4ea1-82c1-eb0510e37c6f
unix  2      [ ACC ]     STREAM     LISTENING     38748    379/logd             /dev/socket/logd
unix  2      [ ACC ]     SEQPACKET  LISTENING     38749    379/logd             /dev/socket/logdr
unix  2      [ ACC ]     SEQPACKET  LISTENING     38759    380/lmkd             /dev/socket/lmkd

iptables -nvL:

Chain INPUT (policy ACCEPT 1960K packets, 718M bytes)
 pkts bytes target     prot opt in     out     source               destination         
1960K  718M bw_INPUT   all  --  *      *       0.0.0.0/0            0.0.0.0/0           
1960K  718M fw_INPUT   all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 oem_fwd    all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 fw_FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 bw_FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 tetherctrl_FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 2170K packets, 408M bytes)
 pkts bytes target     prot opt in     out     source               destination         
2170K  408M oem_out    all  --  *      *       0.0.0.0/0            0.0.0.0/0           
2170K  408M fw_OUTPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
2170K  408M st_OUTPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
2170K  408M bw_OUTPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain bw_FORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain bw_INPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         
1960K  718M bw_global_alert  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 RETURN     esp  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x100000/0x100000
1960K  718M MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            MARK or 0x100000

Chain bw_OUTPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         
2170K  408M bw_global_alert  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain bw_costly_shared (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 bw_penalty_box  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain bw_data_saver (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain bw_global_alert (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 459K  663M            all  --  *      *       0.0.0.0/0            0.0.0.0/0            ! quota globalAlert: 2097152 bytes 

Chain bw_happy_box (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0           match bpf pinned /sys/fs/bpf/netd_shared/prog_netd_skfilter_allowlist_xtbpf
    0     0 bw_data_saver  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain bw_penalty_box (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           match bpf pinned /sys/fs/bpf/netd_shared/prog_netd_skfilter_denylist_xtbpf reject-with icmp-port-unreachable
    0     0 bw_happy_box  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain fw_FORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain fw_INPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain fw_OUTPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain oem_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain oem_out (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain st_OUTPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain st_clear_caught (2 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain st_clear_detect (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            connmark match  0x2000000/0x2000000 reject-with icmp-port-unreachable
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            connmark match  0x1000000/0x1000000
    0     0 CONNMARK   tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            u32 "0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x0&0xffff0000=0x16030000&&0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x4&0xff0000=0x10000" CONNMARK or 0x1000000
    0     0 CONNMARK   udp  --  *      *       0.0.0.0/0            0.0.0.0/0            u32 "0x0>>0x16&0x3c@0x8&0xffff0000=0x16fe0000&&0x0>>0x16&0x3c@0x14&0xff0000=0x10000" CONNMARK or 0x1000000
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            connmark match  0x1000000/0x1000000
    0     0 st_clear_caught  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            state ESTABLISHED u32 "0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x0&0x0=0x0"
    0     0 st_clear_caught  udp  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain st_penalty_log (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0            CONNMARK or 0x1000000
    0     0 NFLOG      all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain st_penalty_reject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0            CONNMARK or 0x2000000
    0     0 NFLOG      all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-port-unreachable

Chain tetherctrl_FORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain tetherctrl_counters (0 references)
 pkts bytes target     prot opt in     out     source               destination

0 replies

pomhg · 2023-08-07T18:36:40Z

pomhg
Aug 7, 2023
Author

iptables -nvL -t mangle:

Chain PREROUTING (policy ACCEPT 5350 packets, 849K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT (policy ACCEPT 5350 packets, 849K bytes)
 pkts bytes target     prot opt in     out     source               destination         
1985K  733M wakeupctrl_mangle_INPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
1985K  733M routectrl_mangle_INPUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 tetherctrl_mangle_FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 6240 packets, 666K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 6247 packets, 666K bytes)
 pkts bytes target     prot opt in     out     source               destination         
2198K  420M oem_mangle_post  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
2198K  420M bw_mangle_POSTROUTING  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
2198K  420M idletimer_mangle_POSTROUTING  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain bw_mangle_POSTROUTING (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  *      ipsec+  0.0.0.0/0            0.0.0.0/0           
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            policy match dir out pol ipsec
2198K  420M MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            MARK and 0xffefffff
2198K  420M            all  --  *      *       0.0.0.0/0            0.0.0.0/0           match bpf pinned /sys/fs/bpf/netd_shared/prog_netd_skfilter_egress_xtbpf

Chain idletimer_mangle_POSTROUTING (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 6247  666K IDLETIMER  all  --  *      wlan0   0.0.0.0/0            0.0.0.0/0            timeout:15 label:1 send_nl_msg

Chain oem_mangle_post (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain routectrl_mangle_INPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 5350  849K MARK       all  --  wlan0  *       0.0.0.0/0            0.0.0.0/0            MARK xset 0x30065/0xffefffff

Chain tetherctrl_mangle_FORWARD (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp flags:0x02/0x02 TCPMSS clamp to PMTU

Chain wakeupctrl_mangle_INPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    1    52 NFLOG      all  --  wlan0  *       0.0.0.0/0            0.0.0.0/0            mark match 0x80000000/0x80000000 limit: avg 10/sec burst 5 nflog-prefix  "iface:wlan0" nflog-group 3 nflog-threshold 8

iptables -nvL -t nat:

Chain PREROUTING (policy ACCEPT 28181 packets, 26M bytes)
 pkts bytes target     prot opt in     out     source               destination         
28181   26M oem_nat_pre  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 28179 packets, 26M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 133K packets, 32M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain POSTROUTING (policy ACCEPT 133K packets, 32M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 133K   32M tetherctrl_nat_POSTROUTING  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain oem_nat_pre (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain tetherctrl_nat_POSTROUTING (1 references)
 pkts bytes target     prot opt in     out     source               destination

iptables -nvL -t raw

Chain PREROUTING (policy ACCEPT 14080 packets, 2094K bytes)
 pkts bytes target     prot opt in     out     source               destination
1994K  734M idletimer_raw_PREROUTING  all  --  *      *       0.0.0.0/0            0.0.0.0/0
1994K  734M bw_raw_PREROUTING  all  --  *      *       0.0.0.0/0            0.0.0.0/0
1994K  734M tetherctrl_raw_PREROUTING  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 16029 packets, 1705K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain bw_raw_PREROUTING (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0xdeadc1a7
    0     0 RETURN     all  --  ipsec+ *       0.0.0.0/0            0.0.0.0/0
    0     0 RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            policy match dir in pol ipsec
1994K  734M            all  --  *      *       0.0.0.0/0            0.0.0.0/0           match bpf pinned /sys/fs/bpf/netd_shared/prog_netd_skfilter_ingress_xtbpf

Chain idletimer_raw_PREROUTING (1 references)
 pkts bytes target     prot opt in     out     source               destination
14080 2094K IDLETIMER  all  --  wlan0  *       0.0.0.0/0            0.0.0.0/0            timeout:15 label:1 send_nl_msg

Chain tetherctrl_raw_PREROUTING (1 references)
 pkts bytes target     prot opt in     out     source               destination

0 replies

Integral-Tech · 2024-09-17T03:40:57Z

Integral-Tech
Sep 17, 2024
Maintainer

如果是 android13-5.10 或更新的内核，是否可以直接使用出厂内核呢？

1 reply

pomhg Sep 17, 2024
Author

不一定，得满足大鹅的内核要求

wanlce · 2025-02-24T03:33:46Z

wanlce
Feb 24, 2025
Collaborator

@pomhg 佬，目前 ppp #746 已经支持了，有没有兴趣再康康呀

1 reply

pomhg Feb 24, 2025
Author

好，抽空我再试试，android更新了几个版本，不知道CGroup还有没有问题

[WIP]安卓吃鹅记录 updated on 2025-3-5 #263

Uh oh!

Uh oh!

pomhg Aug 5, 2023

Replies: 7 comments · 3 replies

Uh oh!

mzz2017 Aug 6, 2023 Maintainer

Uh oh!

pomhg Aug 6, 2023 Author

Uh oh!

Uh oh!

pomhg Aug 6, 2023 Author

Uh oh!

pomhg Aug 7, 2023 Author

Uh oh!

Uh oh!

pomhg Aug 7, 2023 Author

Uh oh!

pomhg Aug 7, 2023 Author

Uh oh!

Uh oh!

Integral-Tech Sep 17, 2024 Maintainer

Uh oh!

pomhg Sep 17, 2024 Author

Uh oh!

wanlce Feb 24, 2025 Collaborator

Uh oh!

pomhg Feb 24, 2025 Author

pomhg
Aug 5, 2023

Replies: 7 comments 3 replies

mzz2017
Aug 6, 2023
Maintainer

pomhg Aug 6, 2023
Author

pomhg
Aug 6, 2023
Author

pomhg
Aug 7, 2023
Author

pomhg
Aug 7, 2023
Author

pomhg
Aug 7, 2023
Author

Integral-Tech
Sep 17, 2024
Maintainer

pomhg Sep 17, 2024
Author

wanlce
Feb 24, 2025
Collaborator

pomhg Feb 24, 2025
Author