View and blacklist/whitelist active connections and current processes on device. Note: this library makes use of system calls; Apple will not accept any app built using it.

NSMutableArray* getActiveConnections(uint32_t proto, char *name, int af)

Returns an array containing NSDictionaries with the following keys:

• "Foreign address"
• "Foreign port"
• "Local address"
• "Local port"
• "State"

Example call: getActiveConnections(IPPROTO_TCP,"tcp",AF_INET) to fetch active TCP connections.

Example entry in resulting array:

{
    "foreign address" = "mpr2.ngd.vip.bf1.yahoo.com";
    "foreign port" = "443 (https)";
    "local address" = "10.0.0.0";
    "local port" = 54000;
    state = "CLOSE_WAIT";
}

Use printTCPConnections and printUDPConnections to NSLog the active TCP or UDP connections, respectively.

NSMutableArray* getProcessInfo()

Returns an array containing NSDictionaries with the following keys:

• "PID"
• "Process name" (process name, up to the first 16 characters)
• "User"

The filter method in the Filter.m class searches the specified list (connections or processes) for the provided blacklist and whitelist terms. It returns an alert if a blacklisted term is found or a whitelisted term is not found in the specified field, but can be modified to return a boolean or take some other action.

- (id)initWithOptions:(NSString *)name
                 info:(NSString *)info
                 type:(NSString *)type
                field:(NSString *)field
                 list:(NSArray *)list

where name is the name you give the filter, info is the type of information you wish to search, type is the type of filter, field is the field to search, and list is an NSArray of the terms you want to search for. (See Constants section for a list of constants to use.)

Once you have created a filter using -initWithOptions, you can run it by calling - (void)filter.

#import <Filter.h>
...
Filter *socialMediaFilter = [[Filter alloc] initWithOptions:@"Social Media Filter"
                                                       info:CONNECTION_INFO
                                                       type:BLACKLIST
                                                      field:FOREIGN_ADDRESS
                                                       list:@[@"facebook",@"twitter"]];

[socialMediaFilter filter];

extern NSString * const PROCESS_INFO;
extern NSString * const CONNECTION_INFO;

extern NSString * const BLACKLIST;
extern NSString * const WHITELIST;

For CONNECTION_INFO:

extern NSString * const FOREIGN_ADDRESS;
extern NSString * const FOREIGN_PORT;
extern NSString * const LOCAL_ADDRESS;
extern NSString * const LOCAL_PORT;

For PROCESS_INFO:

extern NSString * const PROCESS_ID;
extern NSString * const PROCESS_NAME;
extern NSString * const PROCESS_USER;

For accessing filter attributes (e.g. in a dictionary):

extern NSString * const FILTER_NAME;
extern NSString * const FILTER_TYPE;
extern NSString * const FILTER_INFO_TYPE;
extern NSString * const FILTER_FIELD;