User Profile

Posts

Posts

Post marked as solved
8 Replies
0 Views
Replied In Get Process ID (pid) from NEFilterFlow & sourceAppAuditToken
Ohh, found the solution. It's quite easy. Basically you have to convert the "flow.sourceAppAuditToken" to an array of UInt32. This array will have 8 elements. With that array you can init a audit_token_t.let array: [UInt32] = convertToArray(flow.sourceAppAuditToken)let audit_token = audit_token_t(val: (array[0], array[1], array[2], array[3], array[4], array[5], array[6], array[7]))let pid = audit_token_to_pid(token_t)Hope this helps to someone.Regards
Post marked as solved
8 Replies
0 Views
Replied In Get Process ID (pid) from NEFilterFlow & sourceAppAuditToken
Hello,The "audit_token_to_pid" function accepts a "audit_token_t" parameter.How can I convert the "flow.sourceAppAuditToken" (which is a Data type) to the required "audit_token_t" type?Any hints?Thank you
Post marked as solved
15 Replies
0 Views
Replied In how to get the pid of NEFilterFlow in handleNewFlow of Network Extension?
Hello,Thank you for these answers, it helped me a lot in my reasearch.For my usecase I need to find out the PID of the process that makes the request. I understand that I can use "audit_token_to_pid". But this function accepts a "audit_token_t" parameter.How can I convert the "flow.sourceAppAuditToken" (which is a Data type) to the required "audit_token_t" type?Any hints?Thank you again