Page 1 of 1

filemon does not work on iOS10? an alternative solution

PostPosted: Sat Feb 25, 2017 6:00 am
by backendbilly
As it stands, filemon from http://newosxbook.com/files/filemon.tgz does not seem to function on iOS 10. In such cases I go old school and use rsync. I would initially take a snapshot of the file system before running an actual task. After that I take a second snapshot to identify new file system changes. Improvements are more than welcome here.

First, install rsync on your device from Cydia. This assumes you're using usbmuxd to SSH over USB otherwise use device IP address. I would use cert over password for auto login to avoid having to enter password every time.

Second, create a directory on your host machine to take snapshots. For example, "iOS10.x" and cd to it.

Third, on your host machine take an initial snapshot of the file system:
Code: Select all
rsync -aP root@localhost:/ .


Fourth, go ahead do your testing, make file system changes, run processes, etc.

Fifth, get a second snapshot. You can use dry-run to just get a file list without actually copying files:
Code: Select all
rsync -aPn root@localhost:/ .


Billy

Re: filemon does not work on iOS10? an alternative solution

PostPosted: Sun Feb 26, 2017 2:36 am
by morpheus
errr. Filemon doesn't work on iOS 10? Worked for me on 10.1.1 and 10.2. Are you sure? What error did you get?

Re: filemon does not work on iOS10? an alternative solution

PostPosted: Sun Feb 26, 2017 3:33 am
by backendbilly
iPhone 7 with iOS 10.1.1

Code: Select all
oos-iPhone:~ root# ./filemon
kernel_task (PID:0) Not yet
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
(ARG of type 0, len 0)
....
Segmentation fault: 11
oos-iPhone:~