Unfortunately, I seem to have missed the window last night. I'll try again tonight.
My intent was to capture WiFi traffic to/from my iPhone from 11:00 PM to midnight, given that the nightly transfers I see on my bill tend to be in that window.
I was watching election results, and as well wound-up doing a lot of last-minute fiddling - setting-up the iPhone to not screen-lock, disconnecting other devices from my network, disabling all email accounts other than MobileMe, etc. So, I didn't get started till 11:15 or so. No worry, I thought, they usually go around 11:45.
According to my bill, the transfer (a small one, 63K) occured at 10:59.
BTW, the largest "midnight transfer" I've seen on my bill this month was 11MB. They seem to have trailed-off substantially over the past few days, as well as the time has slowly shifted day-by-day by 45 minutes.
I also show two other transfers during the day, which suggests that these are
not just coalesced billing for the day. (At least for ATT.)
06/08 10:59 PM phone Internet/MEdia Net Sent 63KB
06/08 03:09 PM phone Internet/MEdia Net Sent 238KB
06/08 11:16 AM phone Internet/MEdia Net Sent 102KB
Shoot, I'm obviously going to have to keep track of when I leave the house, even for a few minutes. I didn't go anywhere yesterday, but I was out in my car for a while fiddling with my iPad mount.
I did capture some traffic from 11:15 to 12:00, but it was uninteresting. Updating iCal holiday calendar and MobileMe mail. (The only mail I left turned on.)
BTW, iOS 4 users will probably see some decrease in their usage if they are frequently on WiFi at home. That's because 4 maintains a WiFi connection when sleeping - prior to 4 it can only use Cell data when sleeping. So, those email notifications you get? They're using your 3G data.
Unclear to me whether it actually does the download of the mail while sleeping or just that there is mail waiting. I would hope the latter. Otherwise, this would be a good explanation - maybe people are just getting big emails while the iPhone is sleeping. Naw, scratch that, because even if it DOES download the emails, I know that it only downloads large ones partially - you always have to tap to do a complete download of large ones.
It's nice that I have this set-up now, though. Will be interesting to look at the activity of various apps, and see how secure and/or nefarious they are. I would *hope* that Apple does that kind of testing, though, as part of the App approval process.