Ask Your Question
0

Why Is a Cadant router showing up on Wireshark

asked 2022-03-31 07:17:24 +0000

Vtechie gravatar image

updated 2022-05-28 18:09:14 +0000

My ISP's Modem Online light was going off and then back on. This has happened many times and I've had my ISP tech to check and check the connections. This is a problem. I connected my computer to the Hitron Modem's of ISP's and I got a Cadant Router, not Hitron Modem. The Mac Address of the Hitron Modem is not the same as the Cadant.

 [Protocols in frame: eth:ethertype:ip:udp:dhcp]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: **Cadant_X'X:XX:XX** (00:01:XX:XX:XX:XX), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
        <[Destination (resolved): Broadcast]>
        <[Destination OUI: ff:ff:ff]>
        Address: Broadcast (ff:ff:ff:ff:ff:ff)
        <[Address (resolved): Broadcast]>
        <[Address OUI: ff:ff:ff]>
        .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
        <.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)>
        .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
        <.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)> 

   Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: XX.XXX.XXX.1 (XX.XXX.XXX.1), Dst: 255.255.255.255 (255.255.255.255)

Then Router Advertisement on other frames

Ethernet II, Src: **Cadant_XX:XX:X**X (00:01:5c:XX:XX:XX), Dst: IPv6mcast_01 (33:33:00:00:00:01)
    Destination: IPv6mcast_01 (33:33:00:00:00:01)
        <[Destination (resolved): IPv6mcast_01]>
        <[Destination OUI: 33:33:00]>
        Address: IPv6mcast_01 (33:33:00:00:00:01)
        <[Address (resolved): IPv6mcast_01]>
        <[Address OUI: 33:33:00]>
        .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
        <.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)>
        .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
        <.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)>
    Source: Src: Cadant_XX:XX:XX (00:01:5c:XX:XX:XX)
        <[Source (resolved): Src: Cadant_XX:XX:XX]> etc. 
                .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        <.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)>
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        <.... ...0 .... .... .... .... = IG bit: Individual address (unicast)>
    Type: IPv6 (0x86dd)
edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2022-03-31 09:16:22 +0000

grahamb gravatar image

Wireshark displays the source MAC address as a Cadant one as that's who the OUI is registered to by the IEEE. See the IEEE registry for confirmation.

edit flag offensive delete link more

Comments

I agree, I understand. I have a Hitron Modem with a different Mac Address on the bottom service tag. There are some pictures of what I am talking about in the this link. https://drive.google.com/drive/folder...

Thank you

Vtechie gravatar imageVtechie ( 2022-04-02 06:35:03 +0000 )edit

I have found out that someone had access to my personal laptop, configured an Enterprise account as the Default user account. Then, on my Asus Router, has been flashed with a Raspi, two partitions. An Asus wanduck wan monitor. Two Public IP addresses on my Asus router, and two Private IP Address on my Asus router. And then from a zenmap scan, my Public Address has a Wireless Access Point on it.

My ISP Spectrum, does not see a problem with this, when I am trying to keep myself safe and secure. Spoke to a Mike Dowdy about this from Spectrum.

It would not matter if I switched ISP because the same would occur, I had the other one before and I did not know what was actually happening.

It is not okay for my neighbors nor anyone else to be watching and accessing my internet to cover up what ...(more)

Vtechie gravatar imageVtechie ( 2022-05-28 18:19:02 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2022-03-31 07:17:24 +0000

Seen: 1,740 times

Last updated: May 28 '22