Auteur Sujet: [Demi-Résolu] Icotera - Déconnexion / Micro-coupures - Problème LAN/WAN  (Lu 31661 fois)

0 Membres et 1 Invité sur ce sujet

Superpicsou

  • Abonné Free fibre
  • *
  • Messages: 308
  • Feuguerolles-Bully (14)
    • Cloud Illustrations
Perte de la résolution des DNS (mac ocs)
« Réponse #24 le: 08 avril 2022 à 15:11:54 »
Bon. J'ai refais un dernier test car ce matin j'avais plein de truc d'ouvert sur le mac qui aurait pu faire un résultat étrange.
Du coup la en ayant que le terminal de lancé (et biensur tout les processus de fond de macos) et un ping pour voir quand je me fais déco (ya pas longtemps à attendre).

Voilà le résultat



Citer
─$ sudo tcpdump -ne arp
tcpdump: data link type PKTAP
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on pktap, link-type PKTAP (Apple DLT_PKTAP), capture size 262144 bytes
15:05:28.423160 90:9a:4a:e8:cd:04 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 172.16.100.9 tell 185.238.6.40, length 46
15:05:30.423552 90:9a:4a:e8:cd:04 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 172.16.100.9 tell 185.238.6.40, length 46
15:05:32.610060 00:1e:80:93:5f:82 > a0:ce:c8:e7:d4:23, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.15 tell 192.168.1.1, length 46
15:05:32.610073 a0:ce:c8:e7:d4:23 > 00:1e:80:93:5f:82, ethertype ARP (0x0806), length 42: Reply 192.168.1.15 is-at a0:ce:c8:e7:d4:23, length 28
15:05:33.083288 00:1e:80:92:64:dc > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 45.83.231.254 tell 45.83.228.38, length 46
15:05:36.636967 68:ff:7b:95:b1:49 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 185.238.7.119, length 46
15:05:38.105042 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
15:05:38.106630 60:31:97:7a:84:da > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 45.83.231.254 tell 45.83.228.34, length 46
15:05:43.105323 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
15:05:44.126599 00:26:86:00:00:00 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
15:05:48.105314 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
15:05:53.105349 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
15:05:56.043912 e0:10:7f:2c:73:d0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Probe 185.238.5.252, length 46
15:05:56.786140 68:ff:7b:ac:7a:0e > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Probe 185.4.76.135, length 46
15:05:58.105383 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
15:05:58.531048 04:42:1a:2e:9d:f5 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 2.59.238.55, length 46
15:06:00.531770 04:42:1a:2e:9d:f5 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 2.59.238.55, length 46
15:06:02.342647 78:d2:94:e9:bb:c2 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Probe 2.59.237.177, length 46
15:06:03.105257 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
15:06:04.128494 00:26:86:00:00:00 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
15:06:08.216925 60:31:97:7a:84:da > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 45.83.231.254 tell 45.83.228.34, length 46
^C
21 packets captured
13610 packets received by filter
0 packets dropped by kernel

pju91

  • Abonné Free fibre
  • *
  • Messages: 878
  • 91
Perte de la résolution des DNS (mac ocs)
« Réponse #25 le: 08 avril 2022 à 15:27:08 »
Voilà le résultat
Préoccupant : on voit du trafic qui devrait rester côté WAN, par exemple d'une autre box Icotera 00:1e:80:92:64:dc ou avec 172.16.100.9 qui est je crois le serveur DHCP K-Net, et qui sert donc à fournir les paramètres IP aux routeurs des clients K-Net.

Superpicsou

  • Abonné Free fibre
  • *
  • Messages: 308
  • Feuguerolles-Bully (14)
    • Cloud Illustrations
Perte de la résolution des DNS (mac ocs)
« Réponse #26 le: 08 avril 2022 à 15:36:40 »
Pour l'historique, quand j'ai reçu ma box je ne pouvais rien paramétrer car dans mon espace client et dans la config de ma box ce n'était pas mon ip mais celle de quelqu'un d'autre. Je n'avais pas non plus le wifi d'actif.

Du coup un technicien a manuellement activer le wifi avec un ssid défini et un mdp.
Ensuite j'ai eu la bonne ip dans mon interface et accés à la box, sauf l'onglet WIFI qui renvoyé toujours vers l'ancienne config.

Enfin, j'ai eu accés à l'onglet wifi, mais à la sauvegarde j'ai un message d'erreur à chaque fois. MAIS ça sauvegarde bien ce que j'ai mis mais ça m'affiche en continuer le message "Vous avez modifié la configuration - Annuler / Enregistrer"

Citer
Erreur lors de l'enregistrement de la configuration. Vérifiez les champs.
Erreur retournée par le serveur: "Erreur de communication avec votre équipement. Veuillez re-essayer dans quelques instants."








Ma box est-elle maudite ?



pju91

  • Abonné Free fibre
  • *
  • Messages: 878
  • 91
Perte de la résolution des DNS (mac ocs)
« Réponse #27 le: 08 avril 2022 à 15:47:03 »
Ma box est-elle maudite ?
Est-ce que c'est bien sûr qu'il n'y a pas de port mirroring du port WAN vers le port sur lequel est branché le Mac en Ethernet ?
Voir dans onglet outil du panel de la box, en bas de la page.

Superpicsou

  • Abonné Free fibre
  • *
  • Messages: 308
  • Feuguerolles-Bully (14)
    • Cloud Illustrations
Perte de la résolution des DNS (mac ocs)
« Réponse #28 le: 08 avril 2022 à 15:49:20 »
Non, l'option n'est pas coché.

J'ai fais un tcpdump aussi sur le wifi 5.0Ghz qui ne plante pas pour voir.
Il y a moins de traffic étrange non, à voir si c'est lié au fait que je n'ai plus la même ip ?

Citer
$ sudo tcpdump -ne arp
tcpdump: data link type PKTAP
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on pktap, link-type PKTAP (Apple DLT_PKTAP), capture size 262144 bytes
15:46:15.835928 7c:26:64:de:d4:bc > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.254 (7c:26:64:de:d4:bc) tell 0.0.0.0, length 46
15:46:17.837083 7c:26:64:de:d4:bc > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.254 (7c:26:64:de:d4:bc) tell 0.0.0.0, length 46
15:46:19.072140 7c:26:64:de:d4:bc > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.254 (7c:26:64:de:d4:bc) tell 0.0.0.0, length 46
15:46:29.082206 7c:26:64:de:d4:bc > 3c:22:fb:01:d0:80, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.77 tell 192.168.1.254, length 46
15:46:29.082215 3c:22:fb:01:d0:80 > 7c:26:64:de:d4:bc, ethertype ARP (0x0806), length 42: Reply 192.168.1.77 is-at 3c:22:fb:01:d0:80, length 28
15:46:54.518475 7c:26:64:de:d4:bc > 3c:22:fb:01:d0:80, ethertype ARP (0x0806), length 60: Reply 192.168.1.254 is-at 7c:26:64:de:d4:bc, length 46
15:46:59.522649 7c:26:64:de:d4:bc > 3c:22:fb:01:d0:80, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.77 tell 192.168.1.254, length 46
15:46:59.522662 3c:22:fb:01:d0:80 > 7c:26:64:de:d4:bc, ethertype ARP (0x0806), length 42: Reply 192.168.1.77 is-at 3c:22:fb:01:d0:80, length 28
15:47:19.057080 7c:26:64:de:d4:bc > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.254 (7c:26:64:de:d4:bc) tell 0.0.0.0, length 46
15:47:21.057810 7c:26:64:de:d4:bc > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.254 (7c:26:64:de:d4:bc) tell 0.0.0.0, length 46
15:47:23.059289 7c:26:64:de:d4:bc > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.254 (7c:26:64:de:d4:bc) tell 0.0.0.0, length 46
15:47:28.064881 7c:26:64:de:d4:bc > 3c:22:fb:01:d0:80, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.77 tell 192.168.1.254, length 46
15:47:28.064894 3c:22:fb:01:d0:80 > 7c:26:64:de:d4:bc, ethertype ARP (0x0806), length 42: Reply 192.168.1.77 is-at 3c:22:fb:01:d0:80, length 28
^C
13 packets captured
90451 packets received by filter
0 packets dropped by kernel

Steph

  • Abonné K-Net
  • *
  • Messages: 7 715
  • La Balme de Sillingy 74
    • Uptime K-net
Perte de la résolution des DNS (mac ocs)
« Réponse #29 le: 08 avril 2022 à 15:54:29 »
Est-ce que c'est bien sûr qu'il n'y a pas de port mirroring du port WAN vers le port sur lequel est branché le Mac en Ethernet ?
Voir dans onglet outil du panel de la box, en bas de la page.
+1 edit : ça y ressemble quand même beaucoup!

Et peut-être aussi vérifier que WAN(bleu) et LAN (jaune Port_n) partent bien chacun du bon coté réseau de la K-box.

Superpicsou

  • Abonné Free fibre
  • *
  • Messages: 308
  • Feuguerolles-Bully (14)
    • Cloud Illustrations
Perte de la résolution des DNS (mac ocs)
« Réponse #30 le: 08 avril 2022 à 16:03:45 »
Mon installation ressemble à ça



L'ONT sur le WAN
Puis après ça passe de la box a la baie de la maison pour les connexions filaire.
Et le wifi bas, wifi.
Ya en plus une box ADSL mais rien de branché dessus à part le téléphone (comment ça ya un téléphone sur le kbox?)

pju91

  • Abonné Free fibre
  • *
  • Messages: 878
  • 91
Perte de la résolution des DNS (mac ocs)
« Réponse #31 le: 08 avril 2022 à 16:04:38 »
Il y a moins de traffic étrange non, à voir si c'est lié au fait que je n'ai plus la même ip ?
C'est du trafic ARP avec la BBOX (si 192.168.1.254 est bien son adresse) qui fait également de la prévention de duplication de son adresse IP (les broadcasts indiquant ... tell 0.0.0.0).
Je ne vois pas d'ARP avec la K-BOX.

Superpicsou

  • Abonné Free fibre
  • *
  • Messages: 308
  • Feuguerolles-Bully (14)
    • Cloud Illustrations
Perte de la résolution des DNS (mac ocs)
« Réponse #32 le: 08 avril 2022 à 16:08:20 »
Ok.. bon je vais supprimer tout les réseaux du mac vu qu'il m'affiche être sur la kbox 5Ghz alors qu'en fait il utilise le wifi de la Bbox...

Voilà en vraiment 5Ghz

Citer
tcpdump: data link type PKTAP
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on pktap, link-type PKTAP (Apple DLT_PKTAP), capture size 262144 bytes
16:09:58.169239 00:1e:80:93:5f:82 > 3c:22:fb:01:d0:80, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.81 tell 192.168.1.1, length 46
16:09:58.169255 3c:22:fb:01:d0:80 > 00:1e:80:93:5f:82, ethertype ARP (0x0806), length 42: Reply 192.168.1.81 is-at 3c:22:fb:01:d0:80, length 28
16:09:58.186646 00:1e:80:93:5f:82 > 3c:22:fb:01:d0:80, ethertype ARP (0x0806), length 60: Reply 192.168.1.1 is-at 00:1e:80:93:5f:82, length 46
16:11:28.285084 00:1e:80:93:5f:82 > 3c:22:fb:01:d0:80, ethertype ARP (0x0806), length 60: Reply 192.168.1.1 is-at 00:1e:80:93:5f:82, length 46
^C
4 packets captured
129009 packets received by filter
0 packets dropped by kernel

pju91

  • Abonné Free fibre
  • *
  • Messages: 878
  • 91
Perte de la résolution des DNS (mac ocs)
« Réponse #33 le: 08 avril 2022 à 16:19:51 »
Ok.. bon je vais supprimer tout les réseaux du mac vu qu'il m'affiche être sur la kbox 5Ghz alors qu'en fait il utilise le wifi de la Bbox...
Les SSID de la BBOX et de la K-Box sont différents ?

Voilà en vraiment 5Ghz
Là on ne voit plus d'adresses extérieures.

Superpicsou

  • Abonné Free fibre
  • *
  • Messages: 308
  • Feuguerolles-Bully (14)
    • Cloud Illustrations
Perte de la résolution des DNS (mac ocs)
« Réponse #34 le: 08 avril 2022 à 16:21:17 »
Oui pas la même SSID



Un comparatif

Wifi 5.0Ghz Kbox (tout les wifi supprimés avant)

Citer
tcpdump: data link type PKTAP
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on pktap, link-type PKTAP (Apple DLT_PKTAP), capture size 262144 bytes
16:09:58.169239 00:1e:80:93:5f:82 > 3c:22:fb:01:d0:80, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.81 tell 192.168.1.1, length 46
16:09:58.169255 3c:22:fb:01:d0:80 > 00:1e:80:93:5f:82, ethertype ARP (0x0806), length 42: Reply 192.168.1.81 is-at 3c:22:fb:01:d0:80, length 28
16:09:58.186646 00:1e:80:93:5f:82 > 3c:22:fb:01:d0:80, ethertype ARP (0x0806), length 60: Reply 192.168.1.1 is-at 00:1e:80:93:5f:82, length 46
16:11:28.285084 00:1e:80:93:5f:82 > 3c:22:fb:01:d0:80, ethertype ARP (0x0806), length 60: Reply 192.168.1.1 is-at 00:1e:80:93:5f:82, length 46
^C
4 packets captured
129009 packets received by filter
0 packets dropped by kernel

Ethernet Kbox avec wifi coupé

Citer
$ sudo tcpdump -ne arp                                                                                                                                     130 ↵
tcpdump: data link type PKTAP
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on pktap, link-type PKTAP (Apple DLT_PKTAP), capture size 262144 bytes
16:13:08.686751 60:31:97:7a:84:da > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 45.83.231.254 tell 45.83.228.34, length 46
16:13:08.843783 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Probe 192.168.1.15, length 28
16:13:09.166233 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Probe 192.168.1.15, length 28
16:13:09.490537 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Probe 192.168.1.15, length 28
16:13:09.811209 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Announcement 192.168.1.15, length 28
16:13:10.132827 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Announcement 192.168.1.15, length 28
16:13:10.456825 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Announcement 192.168.1.15, length 28
16:13:10.457588 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 192.168.1.1 tell 192.168.1.15, length 28
16:13:10.458329 00:1e:80:93:5f:82 > a0:ce:c8:e7:d4:23, ethertype ARP (0x0806), length 60: Reply 192.168.1.1 is-at 00:1e:80:93:5f:82, length 46
16:13:10.458669 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.15, length 28
16:13:10.490560 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 192.168.1.1 tell 192.168.1.15, length 28
16:13:10.491628 00:1e:80:93:5f:82 > a0:ce:c8:e7:d4:23, ethertype ARP (0x0806), length 60: Reply 192.168.1.1 is-at 00:1e:80:93:5f:82, length 46
16:13:10.782809 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.15, length 28
16:13:11.107619 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.15, length 28
16:13:11.432368 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.15, length 28
16:13:11.757101 a0:ce:c8:e7:d4:23 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.15, length 28
16:13:14.253326 44:4e:6d:ac:0c:3c > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.238.171, length 46
16:13:16.377005 00:1e:80:93:74:14 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 45.83.231.47, length 46
16:13:17.347688 00:1e:80:93:0b:58 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:13:17.616606 00:1e:80:93:5f:82 > a0:ce:c8:e7:d4:23, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.15 tell 192.168.1.1, length 46
16:13:17.616615 a0:ce:c8:e7:d4:23 > 00:1e:80:93:5f:82, ethertype ARP (0x0806), length 42: Reply 192.168.1.15 is-at a0:ce:c8:e7:d4:23, length 28
16:13:18.347569 00:1e:80:93:0b:58 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:13:19.012901 00:1e:80:93:04:b0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:13:19.348050 00:1e:80:93:0b:58 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:13:20.013022 00:1e:80:93:04:b0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:13:21.013464 00:1e:80:93:04:b0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:13:22.183545 00:26:86:00:00:00 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:13:24.915061 10:6f:3f:0f:c0:84 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Probe 2.59.237.115, length 46
16:13:25.387126 68:ff:7b:95:b2:b4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 185.238.7.120, length 46
16:13:27.082115 e0:10:7f:2c:73:d0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Probe 185.238.5.252, length 46
16:13:29.234524 04:42:1a:2e:9d:f5 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 2.59.238.55, length 46
16:13:31.237316 04:42:1a:2e:9d:f5 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 2.59.238.55, length 46
16:13:31.886197 00:0e:c4:d2:80:22 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 185.238.7.254 tell 185.238.6.33, length 46
16:13:32.190570 00:26:86:00:00:00 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:13:32.454925 90:9a:4a:e8:cd:04 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 172.16.100.9 tell 185.238.6.40, length 46
16:13:33.630182 68:ff:7b:95:b1:49 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 185.238.7.119, length 46
16:13:38.717259 00:1e:80:84:1b:70 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 178.250.209.34 tell 169.254.1.1, length 46
16:13:38.792847 60:31:97:7a:84:da > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 45.83.231.254 tell 45.83.228.34, length 46
16:13:40.786214 e0:23:ff:6d:6e:e0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 185.238.4.147 tell 185.238.4.204, length 46
16:13:40.789500 2c:30:33:e6:11:b3 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 185.238.4.147 tell 185.238.4.237, length 46
16:13:42.194497 00:26:86:00:00:00 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:13:46.674459 e8:fc:af:8f:21:c5 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 185.238.4.147 tell 185.238.4.125, length 46
16:13:46.742695 e8:1c:ba:36:01:d0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Probe 2.59.238.91, length 46
16:13:47.753161 e8:1c:ba:36:01:d0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Probe 2.59.238.91, length 46
16:13:48.763282 e8:1c:ba:36:01:d0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Probe 2.59.238.91, length 46
16:13:49.773365 e8:1c:ba:36:01:d0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Probe 2.59.238.91, length 46
16:13:50.244198 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
16:13:50.560604 24:a0:74:4c:15:21 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 192.168.1.99, length 46
16:13:50.789093 e8:1c:ba:36:01:d0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Reply 2.59.238.91 is-at e8:1c:ba:36:01:d0, length 46
16:13:53.101012 24:a0:74:4c:15:21 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 192.168.1.99, length 46
16:13:53.283915 00:26:86:00:00:00 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:13:54.250881 38:94:ed:f7:80:f3 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 2.59.239.15, length 46
16:13:55.244542 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
16:14:00.244360 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
^C
54 packets captured
43567 packets received by filter
0 packets dropped by kernel

Wifi 2.4Ghz Kbox (tout les wifi supprimés avant)

Citer
─$ sudo tcpdump -ne arp
tcpdump: data link type PKTAP
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on pktap, link-type PKTAP (Apple DLT_PKTAP), capture size 262144 bytes
16:16:11.666963 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
16:16:12.639850 00:26:86:00:00:00 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:16:16.533603 e8:1c:ba:36:01:d0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Probe 2.59.238.91, length 46
16:16:18.501542 e8:1c:ba:36:01:d0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Probe 2.59.238.91, length 46
16:16:22.441718 00:1e:80:44:02:2d > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 194.147.2.254 tell 194.147.2.87, length 46
16:16:24.838648 00:1e:80:44:02:2d > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 194.147.2.254 tell 194.147.2.87, length 46
16:16:24.901552 38:94:ed:f7:80:f3 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 2.59.239.15, length 46
16:16:25.707081 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
16:16:30.709244 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
16:16:35.706819 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
16:16:36.147686 24:a0:74:4c:15:21 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 56: Announcement 192.168.1.99, length 42
16:16:37.990223 00:1e:80:7f:53:5a > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.86 tell 192.168.1.1, length 46
16:16:38.455900 60:31:97:7a:84:da > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 45.83.231.254 tell 45.83.228.34, length 46
16:16:38.680707 24:a0:74:4c:15:21 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 56: Announcement 192.168.1.99, length 42
16:16:38.730213 00:26:86:00:00:00 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:16:40.708718 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
16:16:45.706871 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
16:16:48.947365 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:16:49.995158 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:16:50.706551 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
16:16:51.033456 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:16:52.073734 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:16:53.113278 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:16:54.153441 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:16:56.514947 b0:a7:b9:87:83:2f > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Announcement 2.59.237.150, length 46
16:16:56.796332 10:0d:7f:91:6f:e4 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 192.168.1.44 tell 192.168.1.1, length 46
^C
26 packets captured
13234 packets received by filter
0 packets dropped by kernel

Pour compléter la chose, un tcpdump depuis mon windows, en ethernet et qui lui ne perd pas la connexion.

Citer
C:\Users\xxx\Downloads\tcpdump_trial_license\tcpdump.exe: verbose output suppressed, use -v or -vv for full protocol decode
listening on \Device\{02B0A39E-751B-4DBA-BFB3-94A39968E2C0}, link-type EN10MB (Ethernet), capture size 262144 bytes
16:52:01.459496 00:1e:80:44:02:2d > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 194.147.2.254 tell 194.147.2.87, length 46
16:52:01.459496 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:52:01.928102 90:6c:ac:84:9e:e0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.238.185 tell 0.0.0.0, length 46
16:52:02.037486 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:02.506125 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:52:02.667806 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:02.933397 90:6c:ac:84:9e:e0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.238.185 tell 0.0.0.0, length 46
16:52:03.542742 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:52:03.667610 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:03.949132 90:6c:ac:84:9e:e0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.238.185 tell 0.0.0.0, length 46
16:52:04.138082 78:d2:94:0e:e9:42 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.59 tell 2.59.239.59, length 46
16:52:04.263047 00:1e:80:44:02:2d > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 194.147.2.254 tell 194.147.2.87, length 46
16:52:04.591133 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:52:04.965979 90:6c:ac:84:9e:e0 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Reply 2.59.238.185 is-at 90:6c:ac:84:9e:e0, length 46
16:52:05.059740 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:05.623708 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:52:05.670574 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:06.016535 bc:a5:11:31:f7:ae > 44:82:e5:1d:d4:02, ethertype ARP (0x0806), length 60: Request who-has 192.168.18.1 tell 192.168.18.2, length 46
16:52:06.016535 bc:a5:11:31:f7:ae > 44:82:e5:1d:d4:02, ethertype ARP (0x0806), length 60: Request who-has 192.168.18.1 tell 192.168.18.2, length 46
16:52:06.661760 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:52:06.677383 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:06.896081 00:1e:80:44:02:2d > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 194.147.2.254 tell 194.147.2.87, length 46
16:52:07.083536 00:1e:80:93:48:00 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 169.254.1.1 tell 169.254.1.3, length 46
16:52:07.708389 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:52:08.068208 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:08.507189 60:31:97:7a:84:da > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 45.83.231.254 tell 45.83.228.34, length 46
16:52:08.679057 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:08.741542 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:52:09.680457 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:09.789807 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:52:10.414662 b0:a7:b9:87:83:2f > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.237.150 tell 2.59.237.150, length 46
16:52:10.823276 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:52:11.088901 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:11.666828 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:11.869871 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46
16:52:12.671321 3c:7c:3f:20:c5:55 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 169.254.255.255 tell 192.168.1.46, length 28
16:52:12.905641 00:11:2a:22:48:e7 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Request who-has 2.59.239.254 tell 2.59.236.124, length 46

37 packets captured
2500 packets received by filter
0 packets dropped by kernel

Sur l'ethernet et le wifi 2.4 il me deco trés rapidement mais continue à spam des trucs.
La question aussi c'est pourquoi windows s'en fou et continue sa vie, alors que le mac dit fuck et coupe les ponts avec l'icotera
« Modifié: 08 avril 2022 à 16:57:11 par Superpicsou »

pju91

  • Abonné Free fibre
  • *
  • Messages: 878
  • 91
Perte de la résolution des DNS (mac ocs)
« Réponse #35 le: 08 avril 2022 à 16:41:48 »
Un comparatif

Wifi 5.0Ghz Kbox (tout les wifi supprimés avant)

Ethernet Kbox avec wifi coupé

Wifi 2.4Ghz Kbox (tout les wifi supprimés avant)

Sur l'ethernet et le wifi 2.4 il me deco trés rapidement mais continue à spam des trucs.
Clairement, sur "Ethernet" et sur WIFI 2.4 GHz, c'est totalement anormal, on voit du trafic qui n'a rien à faire là.
Exemples :
pju@fedora ~]$ whois 45.83.231.254 |grep -i netname
netname:        KNET-CUSTOMERS
[pju@fedora ~]$ whois 185.238.4.147|grep netname
netname:        KNET-CUSTOMERS
[pju@fedora ~]$ whois 2.59.238.91|grep netname
netname:        KNET-CUSTOMERS
Je laisse les experts de la KBOX dire ce qu'ils en pensent.