com.droidtracer

Class DroidTracerService

java.lang.Object

Service

com.droidtracer.DroidTracerService

public class DroidTracerService
extends Service

Implement your analysis in onEvent().

Version:

0.1

Author:

Jan-Christoph Kuester

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
class	DroidTracerService.LocalBinder

Constructor Summary

Constructors

Constructor and Description
DroidTracerService()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	addServiceToBlacklist(java.lang.String service) Never intercept any system events of a service.
boolean	addServiceToWhitelist(java.lang.String service) Always intercept system events of a service, even for apps that are not monitored.
IBinder	onBind(Intent intent)
void	onCreate()
void	onDestroy()
void	onEvent(int time, int uid, java.lang.String service, java.lang.String method, java.util.List<java.lang.Object> params) Callback method that is triggered if a new system event occurs.
int	onStartCommand(Intent intent, int flags, int startId)
boolean	removeServiceFromBlacklist(java.lang.String service) Never intercept any system events of a service.
boolean	removeServiceFromWhitelist(java.lang.String service) Always intercept system events of a service (e.g., com.android.internal.telephony.ISms), even for apps that are not monitored.
boolean	startInterceptingApp(int uid) Notify kernel module to start intercepting system events of an app.
boolean	stopInterceptingApp(int uid) Notify kernel module to stop intercepting system events of an app.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DroidTracerService

public DroidTracerService()

Method Detail

onCreate

public void onCreate()

onEvent

public void onEvent(int time,
           int uid,
           java.lang.String service,
           java.lang.String method,
           java.util.List<java.lang.Object> params)

Callback method that is triggered if a new system event occurs. Implement your analysis HERE. Note, an app must be intercepted to receive its system events (@see startInterceptingApp) or the according service needs to be added to the whitelist (@see addServiceToWhitelist).

Parameters:

time - Unix time stamp (seconds since 1970).

uid - Linux UID, which identifies an app.

service - name of service called (e.g., com.android.internal.telephony.ISms).

method - name of method called (e.g., sendText() if SMS was sent).

params - unmarshalled method parameters.

onDestroy

public void onDestroy()

onStartCommand

public int onStartCommand(Intent intent,
                 int flags,
                 int startId)

onBind

public IBinder onBind(Intent intent)

startInterceptingApp

public boolean startInterceptingApp(int uid)

Notify kernel module to start intercepting system events of an app. Note, system events on blacklist are never monitored.

Parameters:

uid - Linux UID, which identifies an app.

Returns:

false if netlink socket not allocated or netlink family not found.

stopInterceptingApp

public boolean stopInterceptingApp(int uid)

Notify kernel module to stop intercepting system events of an app. Note, system events on blacklist are never monitored.

Parameters:

uid - Linux UID, which identifies an app.

Returns:

false if netlink socket not allocated or netlink family not found.

addServiceToBlacklist

public boolean addServiceToBlacklist(java.lang.String service)

Never intercept any system events of a service.

Parameters:

service - interface, which identifies a service (e.g., android.view.IWindowSession).

Returns:

false if netlink socket not allocated or netlink family not found.

removeServiceFromBlacklist

public boolean removeServiceFromBlacklist(java.lang.String service)

Never intercept any system events of a service.

Parameters:

service - interface, which identifies a service (e.g., android.view.IWindowSession).

Returns:

false if netlink socket not allocated or netlink family not found.

addServiceToWhitelist

public boolean addServiceToWhitelist(java.lang.String service)

Always intercept system events of a service, even for apps that are not monitored.

Parameters:

service - interface, which identifies a service (e.g., com.android.internal.telephony.ISms).

Returns:

false if netlink socket not allocated or netlink family not found.

removeServiceFromWhitelist

public boolean removeServiceFromWhitelist(java.lang.String service)

Always intercept system events of a service (e.g., com.android.internal.telephony.ISms), even for apps that are not monitored.

Parameters:

service - interface, which identifies a service (e.g., com.android.internal.telephony.ISms).

Returns:

false if netlink socket not allocated or netlink family not found.