THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Why Is a Cadant router showing up on Wireshark

My ISP's Modem Online light was going off and then back on. This has happened many times and I've had my ISP tech to check and check the connections. This is a problem. I connected my computer to the Hitron Modem's of ISP's and I got a Cadant Router, not Hitron Modem. The Mac Address of the Hitron Modem is not the same as the Cadant. 

 [Protocols in frame: eth:ethertype:ip:udp:dhcp]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: **Cadant_X'X:XX:XX** (00:01:XX:XX:XX:XX), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
    Destination: Broadcast (ff:ff:ff:ff:ff:ff)
        <[Destination (resolved): Broadcast]>
        <[Destination OUI: ff:ff:ff]>
        Address: Broadcast (ff:ff:ff:ff:ff:ff)
        <[Address (resolved): Broadcast]>
        <[Address OUI: ff:ff:ff]>
        .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
        <.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)>
        .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
        <.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)> 

   Type: IPv4 (0x0800)
Internet Protocol Version 4, Src: XX.XXX.XXX.1 (XX.XXX.XXX.1), Dst: 255.255.255.255 (255.255.255.255)

Then Router Advertisement on other frames

Ethernet II, Src: **Cadant_XX:XX:X**X (00:01:5c:XX:XX:XX), Dst: IPv6mcast_01 (33:33:00:00:00:01)
    Destination: IPv6mcast_01 (33:33:00:00:00:01)
        <[Destination (resolved): IPv6mcast_01]>
        <[Destination OUI: 33:33:00]>
        Address: IPv6mcast_01 (33:33:00:00:00:01)
        <[Address (resolved): IPv6mcast_01]>
        <[Address OUI: 33:33:00]>
        .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
        <.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)>
        .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
        <.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)>
    Source: Src: Cadant_XX:XX:XX (00:01:5c:XX:XX:XX)
        <[Source (resolved): Src: Cadant_XX:XX:XX]> etc. 
                .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        <.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)>
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        <.... ...0 .... .... .... .... = IG bit: Individual address (unicast)>
    Type: IPv6 (0x86dd)
Vtechie's avatar
1
Vtechie
asked 2022-03-31 07:17:24 +0000, updated 2022-05-28 18:09:14 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Wireshark displays the source MAC address as a Cadant one as that's who the OUI is registered to by the IEEE. See the IEEE registry for confirmation.

grahamb's avatar
23.8k
grahamb
answered 2022-03-31 09:16:22 +0000
edit flag offensive 0 remove flag delete link
more

Comments

I agree, I understand. I have a Hitron Modem with a different Mac Address on the bottom service tag. There are some pictures of what I am talking about in the this link. https://drive.google.com/drive/folder...

Thank you

Vtechie's avatar Vtechie (2022-04-02 06:35:03 +0000) edit
more
  • delete

I have found out that someone had access to my personal laptop, configured an Enterprise account as the Default user account. Then, on my Asus Router, has been flashed with a Raspi, two partitions. An Asus wanduck wan monitor. Two Public IP addresses on my Asus router, and two Private IP Address on my Asus router. And then from a zenmap scan, my Public Address has a Wireless Access Point on it.

My ISP Spectrum, does not see a problem with this, when I am trying to keep myself safe and secure. Spoke to a Mike Dowdy about this from Spectrum.

It would not matter if I switched ISP because the same would occur, I had the other one before and I did not know what was actually happening.

It is not okay for my neighbors nor anyone else to be watching and accessing my internet to cover up what ... (more)

Vtechie's avatar Vtechie (2022-05-28 18:19:02 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer