Few days ago I installed the new Kernel that fixes the network counters from here http://forum.xda-developers.com/showthread.php?t=1468626 (thanks to ardatdat).
Immediately I noticed that the traffic is counting up way too quickly. I looked at my bills to see if this is new, and realized that since I got the phone, my monthly traffic was consistently at 200-400MB per month, even though I can explain maybe 30MB per month (I have access to wifi pretty much anywhere I go).
So, started digging. In the last 3 days there's been 25MB down and 50MB up. With all the testing I was doing, I can explain maybe 10 down and 5 up. So, using the TrafficCounter app, I found that a system app called "Task Manager" is responsible for the traffic (attached screencap displays traffic over 4 hours).
It doesn't slowly count up. Instead, it will stay at the same mark, then all of a sudden change by 2.2MB. Every time. So it looks like it packages something and sends it off. The most interesting thing? It only does it when on 3G. If I'm connected to WIFI, it's silent. Like it doesn't want me to see what it's doing.
So, installed Shark, and made a traffic capture. I was able to capture the outgoing SSL stream that was exactly 2.18MB. Destination IP 74.125.226.65 resolves to yyz06s07-in-f1.1e100.net. Browsing there gives google's front page......
Checked the TCP stream, right before the transfer, there's a DNS lookup for android.clients.google.com, which responds with that IP address.
Checking SSL Cert gives me *.google.com cert. Same one as for all of their sites
So it turns out every 3 or so hours there's a 2.2MB transfer from my phone to the google servers via encrypted channel.
Looking further, my wife's and my mother's androids are showing just as much data on their bills, they got Nexus S and Galaxy S. While I can see my wife using so much data, it's doubtful my mom has even figured out how to consume so much traffic.
Anyone else notice this?
What is the purpose of it? If it's legitimate, how can they justify using so much of my limited monthly bandwidth?
Immediately I noticed that the traffic is counting up way too quickly. I looked at my bills to see if this is new, and realized that since I got the phone, my monthly traffic was consistently at 200-400MB per month, even though I can explain maybe 30MB per month (I have access to wifi pretty much anywhere I go).
So, started digging. In the last 3 days there's been 25MB down and 50MB up. With all the testing I was doing, I can explain maybe 10 down and 5 up. So, using the TrafficCounter app, I found that a system app called "Task Manager" is responsible for the traffic (attached screencap displays traffic over 4 hours).
It doesn't slowly count up. Instead, it will stay at the same mark, then all of a sudden change by 2.2MB. Every time. So it looks like it packages something and sends it off. The most interesting thing? It only does it when on 3G. If I'm connected to WIFI, it's silent. Like it doesn't want me to see what it's doing.
So, installed Shark, and made a traffic capture. I was able to capture the outgoing SSL stream that was exactly 2.18MB. Destination IP 74.125.226.65 resolves to yyz06s07-in-f1.1e100.net. Browsing there gives google's front page......
Checked the TCP stream, right before the transfer, there's a DNS lookup for android.clients.google.com, which responds with that IP address.
Checking SSL Cert gives me *.google.com cert. Same one as for all of their sites
So it turns out every 3 or so hours there's a 2.2MB transfer from my phone to the google servers via encrypted channel.
Looking further, my wife's and my mother's androids are showing just as much data on their bills, they got Nexus S and Galaxy S. While I can see my wife using so much data, it's doubtful my mom has even figured out how to consume so much traffic.
Anyone else notice this?
What is the purpose of it? If it's legitimate, how can they justify using so much of my limited monthly bandwidth?
