I highly suspect that one of my iPhone apps is scanning for open ports on the local network, but can't think of a way to detect such activity.
I know that I can monitor http(s) connections by using tools like Charles Proxy, but I don't think they can help in detecting port scanning.
I had the following ideas, but not sure how effective they are:
- Setup a local VPN and use it on the phone, so I can detect every connection attempt.
- Setup a local server (say FTP server) and monitor for any connection attempt from the phone.
Do you think of a better/easier way?
Based on suggestions from @AlexProbert and @Matthew, I was able to monitor all outgoing connections from my iPhone. Here is how I did that:
- Enable Internet Sharing from MacBook to the iPhone.
- Open Wireshark. Select iPhone USB and press Start.