How could I find out if the IPv6 Link Local is accessing the 2nd Public IP Address.

asked 2022-03-31 06:41:54 +0000

Vtechie gravatar image

updated 2022-03-31 08:02:23 +0000

grahamb gravatar image

All IPv6 are disabled on my Asus router and Windows 10 computer. No Public IP IPv6 on a browser. I'm not using Bluetooth always turned off. Why am I getting queries for Link Local of lb._dns-sd._udp.local, _companion-link._tcp.local, _raop._tcp.local, _airplay._tcp.local, _homekit._tcp.local

On my Asus router, someone has flashed it with a raspi software, added two partitions. One of the partition, I’m thinking goes to 192.168.50.1 and the other to 192.168.1.1, in my port forwarding appears the 192.168.1.1 nothing else. And The route table has the information on a 2nd Public IP Address then mine with a different mask.

Also on the website "ipinfo.io", It shows my public IP Address, I am wondering why there are different mask on the route Public IP Address and mask on the network Public IP Address Is a different network. First two bytes match but not after that. And is this probably why I'm having a problem with 2 Public IP Addresses coming into the modem.

On my Resource Monitor I have Network, TCP and the network mine I name. In settings of my Windows 10>Network & Internet>View Hardware & Connections. I have seen my networks name listed in the Ethernet area, then one below that say Unknown as in another network is there but unknown.

I do not have enough points to upload a photos, so I added a link and it will show the pictures I am talking about. [linktext] https://drive.google.com/drive/folder...

Frame 6959: 199 bytes on wire, 199 bytes captured on interface \Device\NPF_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}, id 0
    Interface id: 0 (\Device\NPF_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx})
        Interface name: \Device\NPF_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
        Interface description: EXTREME MIRACLES
    Encapsulation type: Ethernet (1)
    Arrival Time: Mar 27, 2022 18:48:57.122920000 Central Daylight Time
    [Time shift for this packet: 0.000000000 seconds]
    [Time delta from previous captured frame: 0.000441000 seconds]
    [Time delta from previous displayed frame: 0.000441000 seconds]
    [Time since reference or first frame: 286.279929000 seconds]
    Frame Number: 6959
    Frame Length: 199 bytes (1592 bits)
    Capture Length: 199 bytes (1592 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ipv6:udp:mdns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: b6MyiPhone  (b6MyiPhone ), Dst: IPv6mcast_fb (33:33:00:00:00:fb)
    Destination: IPv6mcast_fb (33:33:00:00:00:fb)
        <[Destination (resolved): IPv6mcast_fb]>
        <[Destination OUI: 33:33:00]>
        Address: IPv6mcast_fb (33:33:00:00:00:fb)
        <[Address (resolved): IPv6mcast_fb]>
        <[Address OUI: 33:33:00]>
        .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
        <.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)>
        .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
        <.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)>
    Source: b6MyiPhone (b6MyiPhone )
        <[Source (resolved): b6MyiPhone ]>
        <[Source OUI: b6]>
        Address:b6MyiPhone  (b6MyiPhone 7)
        < ...
(more)
edit retag flag offensive close merge delete

Comments

Did you disable IPv6 on your Iphone? Any realy wireshark questions? Question in regard to your router should be asked elsewhere.

hugo.vanderkooij gravatar imagehugo.vanderkooij ( 2022-04-01 14:26:55 +0000 )edit

Thank you for your help Graham,

But, I do not have anyway to disable IPv6 on my iPhone, I was told by Apple Tech Support that as long as I have it disabled on my Asus router that would disable any IPv6 on my iPhone.

On my iPhone settings there is no place on it in Wifi or Cellular that shows an IPv6.

The link will show my iPhone settings. There is no IPv6 settings on it anywhere. https://drive.google.com/drive/folder...

I also think some of the networks on here are way to close as in full bars.

So, it is back to Wireshark as why is it showing up in captures.

Thank you

Vtechie gravatar imageVtechie ( 2022-04-02 05:14:38 +0000 )edit

WireShark shows you what it MEASURES. So if it is shown then someone is generating it. And if the MAC address is your iPhone then it is the very lickely source of the packets. If it smells like a duck, swims like a duck, looks like a duck, .... it propably is a duck. Despite the duck claiming to be a dog.

hugo.vanderkooij gravatar imagehugo.vanderkooij ( 2022-04-04 11:06:47 +0000 )edit

Thank you very much, how can I find out who this is using Wireshark? Thank you again.

Vtechie gravatar imageVtechie ( 2022-05-28 18:00:00 +0000 )edit