#arpnetworks/ 2015-09-01,Tue

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)

WhoWhatWhen
***KDE_Perr1 is now known as KDE_Perry [01:47]
kellytkIs anyone aware of a reason why my ISP-provided wireless router (192.168.254.254) would be showing up in the HTTP access log of a computer on the LAN? The request to / is every 1-2 minutes [01:56]
................. (idle for 1h21mn)
mercutiohmm irc is lagging a LOT
and then it's fine again
[03:17]
.................. (idle for 1h25mn)
http://hackaday.com/2015/08/31/fcc-introduces-rules-banning-wifi-router-firmware-modification/
i wonder how that will play out
it may mean linux is illegal on routers?
well until firmware blobs are built into wireless cards.
oh, it's still proposal
that made it look final
https://apps.fcc.gov/kdb/GetAttachment.html?id=1UiSJRK869RsyQddPi5hpw%3D%3D&desc=594280%20D02%20U-NII%20Device%20Security%20v01r02&tracking_number=39498
erk sounds like it is law already
[04:43]
............................... (idle for 2h30mn)
milkino, i think its still in proposal phase, comments link to a request for comments on the "proposal"
https://www.federalregister.gov/articles/2015/08/06/2015-18402/equipment-authorization-and-electronic-labeling-for-wireless-devices
This document has a comment period that ends in 7 days (09/08/2015)
[07:17]
................... (idle for 1h30mn)
m0undswell, it seems like they're not banning linux on routers but banning modification of wlan radios
makes sense considering how often people use other countries' regulatory domain to configure power levels beyond allowable limits
oh well
[08:48]
can't be bothered to care about it [08:54]
............... (idle for 1h10mn)
brycecRight it doesn't ban Linux, but does make open-source drivers more difficult. We'll see a return to the Atheros "HAL" style I guess. [10:04]
.......... (idle for 49mn)
m0undsyep, probably [10:53]
.............. (idle for 1h9mn)
mercutiomilki: yeh it got extended it looks like
cos deadlines forcomments were 16th august
and there are comments since then
i wonder what fsf has tos ay about that heh
i don't really see how controlling this stuff is meanet to work
what if i take my cellphone to the US?
what about laptop or old device
it seems better to me if they just be proactive with dealing with infringers.
[12:02]
....... (idle for 30mn)
***pjs has quit IRC (*.net *.split)
eryc has quit IRC (*.net *.split)
tellnes has quit IRC (*.net *.split)
mjp_ has quit IRC (*.net *.split)
trobotham has quit IRC (*.net *.split)
tellnes has joined #arpnetworks
mjp_ has joined #arpnetworks
pjs has joined #arpnetworks
eryc has joined #arpnetworks
[12:36]
kellytkDoes anyone have experience with a DSL router making HTTP requests for "/" to IPs on the LAN every 1-2 minutes?
I've only noticed it after setting up a web server on the private LAN
[12:39]
***trobotham has joined #arpnetworks [12:42]
m0undsmercutio: how on earth would they address people misusing low power unlicensed radio spectrum? [12:47]
mercutiom0unds: the same way they do now [12:48]
m0undshaha, okay [12:49]
mercutiothey'd listen for radio interference and move closer to the source [12:49]
m0undsright, and it would require them to sit in a truck looking for people infringing on unlicensed stuff
vs just making it harder to abuse it
if it was licensed stuff and high power transmission, that'd be one thing
[12:49]
mercutioyeah well usually it's in response to complaints from things like weather radar stuff [12:49]
m0undsbut when the unlicensed bands include things like xbox controllers, wireless mice, etc, it's a little harder to deal with [12:50]
mercutiothat stuff is 2.4 ghz normally [12:50]
***pjs has quit IRC (*.net *.split)
eryc has quit IRC (*.net *.split)
[12:50]
mercutioit's 5ish ghz stuff they're cracking down on [12:50]
m0undsright, but it's still a cesspool [12:51]
mercutioi'm not sure it's indoors stuff they're relaly trying to deal with though [12:51]
m0undsand there still was nowhere near enough spectrum allocated for unlicensed stuff [12:51]
mercutioso much as stuff that goes outdoors too
new zealand's just allocated more unlicensed spectrum
[12:51]
m0undsyes, lots of shitty WISPs use unlicensed 5ghz
and it's a mess
[12:51]
mercutiolike 3 ghz or something
yeah wisp's will be able to use 3 ghz here now too
i can't remember the exact frequency
maybe it is 3ghz
cos fcc say they may add 3 ghz too
oh fcc say they may hadd 3.65 to 3.7 ghz
for wisp type stuff i think licensed spectrum is a good idea
and that the cost of doing licensed should be minimised.
[12:51]
***pjs has joined #arpnetworks
eryc has joined #arpnetworks
[12:55]
m0undsso long as the licensed gear is more expensive and the licensing cost is >$0, most of the shitty wisps i'm thinking of would probably stick to unlicensed stuff [13:05]
kellytkSo a call to the ISP who has provided the DSL/wifi router yielded no clue unsurprisingly
Time to write a custom pf ruleset for LAN usage!
[13:10]
mercutioi've heard of attacks on routers from web sites that try to pull stuff off local network to exploit [13:19]
m0undskellytk: what's the mfgr of the router/modem thing? [13:25]
kellytkNetgear
mercutio: I had two ideas, either the router was configured to monitor customers to prevent services being ran (unlikely and better controlled from the upstream) and secondly some shenanigans afoot
Either way, it's a gross display
[13:27]
mercutiowindows often shows names of routers, maybe related. [13:31]
kellytkThank you [13:31]
m0undsyea, was thinking discovery of some sort [13:34]
mercutiohttp://blog.multipath-tcp.org/blog/html/2015/07/24/korea.html
that's actually kind of cool
[13:35]
kellytkIt reminds me of modem shotgunning from days of yore
Nice link, thanks mercutio
[13:37]
mercutionow i am curious to try this on wireless heh
it's a pity have to use two wireless cards to hit two routers.
[13:37]
........... (idle for 53mn)
***jpalmer has joined #arpnetworks
jpalmer_ has joined #arpnetworks
[14:31]
.... (idle for 18mn)
grodymercutio, someone else told me it bodged their bootloader back to windows too [14:49]
mercutioi am using uefi [14:49]
grodymaybe 'cause these last two were windows default (one 7 one 8), then resized and linux..... ah
one is UEFI type (does secure boot etc), other is just BIOS
hmmm...
i've tried forcing androids (back in 2.x days) to try stay on 3G when on WIFI and load balance
[14:49]
m0undsi think the radio status change on android causes it to wipe out your default route for data
at least that was how it was the last time i looked at it
wifi takes preference over viable carrier data
i think adb dumpstate connectivity will give you an idea of how the device sees it
[14:54]
mercutiohttp://arstechnica.co.uk/information-technology/2015/09/microsoft-accused-of-adding-spy-features-to-windows-7-8/
the plot thickens.
[14:57]
m0undsi'm kind of over it tbh [14:57]
mercutioi might try going back to linux fill time [15:00]
m0undsgo for it [15:00]
mercutioerr full
had video driver issues in the past
but maybe it's better now
[15:00]
m0undsdoubt it, but that's the pessimist in me [15:01]
mercutioheh
does radeon do good at spinning fans down?
that was my main annoyance
[15:01]
m0undsno idea [15:01]
mercutiomy full time linux box has fanless video card to fix it :) [15:01]
m0undsi don't use linux on the desktop because i don't have patience to fix stuff [15:01]
mercutiofor me it's mostly cos games and web browsing work better on windows [15:04]
brycecIt did not botch my MBR dual-boot, fwiw.
(re: Win10)
[15:08]
mercutioyeah they seemed to get better with mbr [15:17]
...... (idle for 27mn)
brycecAll my UEFI installs of Win10 were standalone, so I can't comment on that :p [15:44]
mercutiowell it just removes the uefi boot option
you can add the uefi back in. with windows it seems that it can be detected?
with linux it seems you have to add. so it may be i'm doing something wrong.
like - if i stick a ssd in a different computer with uefi it won't just boot
i need to add boot option in
have you done uefi installs with arch?
[15:56]
brycecRight. But that's by design
Yes I have,several times
[15:57]
mercutioand it goes away if you move ssd to a different computer giht?
right
and you need to boot off stick and put it back in
[15:57]
brycecSome OS work around that "limitation" by installing their bootloader to the default shellx64.efi location [15:57]
mercutiooh
i suppose i could install shellx64.efi
[15:58]
brycecIt's a dirty hack, but an effective one all the same. [15:58]
mercutioand get a shell then
that's good enough to fix it :)
[15:58]
brycecYou could. or just copy grub.efi to shellx64.efi :P [15:58]
mercutioheh [15:58]
brycec(There's a grub-install switch to install as shellx64.efi in fact) [15:58]
mercutiosweet
yeh could do that
i'm wondering if i should even still use grub
but i suppose it works
thinking about trying the linux create uefi stub thingy
and avoid the whole bootloader thing completely
and just select boot device by pressing f12 or whatever
[15:58]
brycecPersonally I recommend refind
mercutio: https://wiki.archlinux.org/index.php/GRUB#UEFI_firmware_workaround it's bootx64 not shellx64 apparently
[15:59]
mercutioyeh i probably should have checked arch linux wiki
i keep forgetting that it's good
[16:00]
bryceclolol [16:00]
mercutiobeen using linux so long i'm used to finding it hard to find good answers [16:01]
brycec(no that doesn't mention the grub-install switch. And maybe I was even thinking of refind having such a switch) [16:01]
mercutiooh that's stated as a workaround
not to fix the disappearing if moving to different computer issue
"grub-install automatically tries to create a menu entry in the boot manager."
so yeah that's the primary issue
[16:01]
bryceci.e. it calls to efibootmgr [16:02]
mercutiobecause that's per system not per hard-disk
and i like the freedom to move ssd/hard-disk between machines
(and for windows to not screw with the boot list)
hmm maybe i can install shell straight from windows
[16:02]
brycecshellx64? You should be able to, just copy into place... [16:08]
mercutionot on windows
windows doesn't mount it as a drive
[16:08]
brycecMore of an issue getting to it in the first place
So... mount it as a drive? (Assign it a letter)
[16:08]
mercutioi dunno if that works
yeah you can't
oh looks like there may be a way
woot, mountvol b: /s
[16:09]
........ (idle for 37mn)
mnathani_are we mounting zfs partitions on windows as a drive? [16:48]
mercutiohow would you do that? [16:49]
mnathani_I didnt think it was possible [16:49]
mercutioi'm trying to boot efi shell :( [16:49]
mnathani_oh ok [16:49]
mercutio"launch efi shell from filesystem device" - "not found" [16:50]
.... (idle for 18mn)
i gave up and used usb stick [17:08]
seem to be capped at 24 gigabit for network speed for some reason
still a lot better than the 8 gigabit i'm getting out of windows
[17:13]
....... (idle for 34mn)
even linux to linux i'm still getting synergy issues in one direction
maybe it was linux that was to blame
https://github.com/synergy/synergy/issues/4735
it's not just me, apparently lots of combinations can't paste from client to server
[17:47]
........ (idle for 36mn)
mnathani_On October 15, SoftLayer will change the reverse DNS addresses for servers on our network from xxx.reverse.softlayer.com to xxx.softlayer-reverse.com. If you have hard-coded your servers' default SoftLayer reverse DNS entries in any of your applications or systems, your code will need to be updated to reflect the new reverse DNS entries.
is it just me or does softlayer-reverse.com not seem to be a registered domain
lol : YES! YOUR DOMAIN IS AVAILABLE. BUY IT BEFORE SOMEONE ELSE DOES.
up_the_irons: I was wondering when the invoice would show up
[18:27]
.... (idle for 17mn)
mercutiowow
i think you're right mnathani
although i still think it's pretty rude ;)
you could just email them abou it
[18:47]
up_the_ironslol let's register it ;) [18:51]
mike-burnsHaa! [18:52]
mnathani_:-) [18:55]
m0undshahaha
resisting the urge
[18:58]
kellytk"block in on em0: 199.249.120.1 > 192.168.254.100: ip-proto-17"
What is "ip-proto-17"?
[18:59]
m0unds@google protocol 17 [19:04]
BryceBot32,600,000 total results returned for 'protocol 17', here's 3
List of IP protocol numbers - Wikipedia, the free encyclopedia (https://en.wikipedia.org/wiki/List_of_IP_protocol_numbers) 23, 0x17, TRUNK-1, Trunk-1. 24, 0x18, TRUNK-2, Trunk-2. 25, 0x19, LEAF-1, Leaf-1. 26, 0x1A, LEAF-2, Leaf-2. 27, 0x1B, RDP, Reliable Datagram Protocol ...
Protocol Numbers (http://www.iana.org/assignments/protocol-numbers) Aug 25, 2015 ... In the Internet Protocol version 4 (IPv4) [RFC791] there is a field called "Protocol" to identify ... 17, UDP, User Datagram, [RFC768][Jon_Postel].
User Datagram Protocol - Wikipedia, the free encyclopedia (https://en.wikipedia.org/wiki/User_Datagram_Protocol) The User Datagram Protocol (UDP) is one of the core members of the Internet .... The protocol is that for UDP (see List of IP protocol numbers): 17 (0x11).
[19:04]
kellytkI searched before asking of course. There's surprisingly little info. It seems related to fragmented packets/DDoS [19:04]
m0undsudp. [19:04]
kellytkIt's coming from only one, two max hosts though [19:05]
m0undsip protocol is udp
what udp traffic is it
er 17
figure out what traffic it is using wireshark or something and maybe you can figure out what specifically it is
otherwise, it's just...udp
[19:06]
mike-burnsUDP is a refreshingly short RFC. [19:08]
m0undsyes
i like udp
[19:08]
..... (idle for 22mn)
mercutioreceiving random udp packets is pretty common [19:30]
kellytkhttp://pastebin.com/thYvsH6H
30 and 258
[19:36]
m0undsuhh
that's dns
at least the udp i can be bothered to look at
[19:38]
haha, friend sent me a link to some "avoid people" site that looks for places on foursquare or whatever that nobody checks into
most of the ones within 10 mins of my house are other people's houses. guess they added them to check in to and then stopped or never did
[19:52]
............ (idle for 56mn)
kellytkNice app idea [20:49]
mercutioterrible app idea i reckon :)
it promotes less popular places to make them popular
even if that's some random guys house.
are people generally using gpt with freebsd these days?
as opposed to bsd disk slices
with zfs i suppose you don't even notice which it is
[20:50]
kellytkWell, yes I see your point. What would cause a ping to the router to result in "64 bytes from 192.168.254.254: icmp_seq=5 ttl=64 time=2.213 ms (DUP!)"? I've not seen DUP! before [20:53]
mercutioi've seen dup heaps of times [20:54]
BryceBotThat's what she said!! [20:54]
kellytkI use GPT however I only run VPSs at present, so ZFS isn't an option [20:54]
mercutioit means you're receiving the same ping data back in a packet that's already been received [20:54]
kellytkWhat would cause that? [20:54]
mercutioswitch loop is an easy way to create it
but with your router it may be something silly like pinging broadcast address
[20:54]
kellytkOne virtual server can ping the router IP with no issues, the other gives the DUP! message. They are both running the same pf.conf ruleset [20:57]
mercutioit could also be due to inprecise clock
it may be that the mac is the same on both the vm's
and it's sending data two both vm's
or it may be because you're pinging both at once
[20:58]
kellytkI've verified their MACs differ [21:00]
mercutiotry pinging the host then [21:07]
kellytkWhat? [21:07]
This is such a strange issue. I thought it was caused by bringing up pf, but it's not
Even when I stop pf, the DUP! issue remains
[21:20]
What's strange is the guest which gets the DUP! only gets that for pinging the router, none of the other computers on the LAN
Interesting, DUP! is also caused by pinging google.com
[21:27]
It may have started when I changed my host system to use a static IP vs the router's DHCP [21:33]
..... (idle for 23mn)
Can anyone see any obvious problems with the pf.conf ruleset http://pastebin.com/TkYyTrMc freebsd-update fetch is failing
With the pf service stopped, the fetch functions correctly
[21:56]
.... (idle for 16mn)
I assumed allowing out on 80 would allow in for the same connection, apparently both out and in 80 needed to be allowed [22:12]
.......... (idle for 45mn)
I figured out the DUP! issue mercutio. I need to restart Parallels after changing my workstation's IP to static from DHCP [22:57]

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)