Revision history  [back]

All IPv6 are disabled on my Asus router and Windows 10 computer. No Public IP IPv6 on a browser. I'm not using Bluetooth always turned off. Why am I getting queries for Link Local of lb._dns-sd._udp.local, _companion-link._tcp.local, _raop._tcp.local, _airplay._tcp.local, _homekit._tcp.local

On my Asus router, someone has flashed it with a raspi software, added two partitions. One of the partition, I’m thinking goes to 192.168.50.1 and the other to 192.168.1.1, in my port forwarding appears the 192.168.1.1 nothing else. And The route table has the information on a 2nd Public IP Address then mine with a different mask.

Also on the website "ipinfo.io", It shows my public IP Address, I am wondering why there are different mask on the route Public IP Address and mask on the network Public IP Address Is a different network. First two bytes match but not after that. And is this probably why I'm having a problem with 2 Public IP Addresses coming into the modem.

On my Resource Monitor I have Network, TCP and the network mine I name. In settings of my Windows 10>Network & Internet>View Hardware & Connections. I have seen my networks name listed in the Ethernet area, then one below that say Unknown as in another network is there but unknown.

I do not have enough points to upload a photos, so I added a link and it will show the pictures I am talking about. [linktext] https://drive.google.com/drive/folders/1jy_ycM2lF3OerWblVSeGftNDNYQmJaMG?usp=sharing

Frame 6959: 199 bytes on wire, 199 bytes captured on interface \Device\NPF_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}, id 0
    Interface id: 0 (\Device\NPF_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx})
        Interface name: \Device\NPF_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}
        Interface description: EXTREME MIRACLES
    Encapsulation type: Ethernet (1)
    Arrival Time: Mar 27, 2022 18:48:57.122920000 Central Daylight Time
    [Time shift for this packet: 0.000000000 seconds]
    [Time delta from previous captured frame: 0.000441000 seconds]
    [Time delta from previous displayed frame: 0.000441000 seconds]
    [Time since reference or first frame: 286.279929000 seconds]
    Frame Number: 6959
    Frame Length: 199 bytes (1592 bits)
    Capture Length: 199 bytes (1592 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ipv6:udp:mdns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: b6MyiPhone  (b6MyiPhone ), Dst: IPv6mcast_fb (33:33:00:00:00:fb)
    Destination: IPv6mcast_fb (33:33:00:00:00:fb)
        <[Destination (resolved): IPv6mcast_fb]>
        <[Destination OUI: 33:33:00]>
        Address: IPv6mcast_fb (33:33:00:00:00:fb)
        <[Address (resolved): IPv6mcast_fb]>
        <[Address OUI: 33:33:00]>
        .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
        <.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)>
        .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
        <.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)>
    Source: b6MyiPhone (b6MyiPhone )
        <[Source (resolved): b6MyiPhone ]>
        <[Source OUI: b6]>
        Address:b6MyiPhone  (b6MyiPhone 7)
        <[Address (resolved): b6MyiPhone 7]>
        <[Address OUI: b6:]>
        .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
        <.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)>
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        <.... ...0 .... .... .... .... = IG bit: Individual address (unicast)>
    Type: IPv6 (0x86dd)
Internet Protocol Version 6, Src: fe80::2 (fe80::2f:7), Dst: ff02::fb (ff02::fb)
    0110 .... = Version: 6
    <0110 .... = Version: 6 [This field makes the filter match on "ip.version == 6" possible]>
    .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT)
        .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0)
        .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    .... 0111 0000 0100 0000 0000 = Flow Label: 0x70400
    Payload Length: 145
    Next Header: UDP (17)
    Hop Limit: 255
    Source Address: fe80::2f:xxxx:xxx:xxx (fe80::2f:xxxx:xxx:xxx)
    <Source or Destination Address: fe80::2f:xxxx:xxx:xxx (fe80::2f:xxxx:xxx:xxx)>
    <[Source Host: fe80::2f:xxxx:xxx:xxx]>
    <[Source or Destination Host: fe80::2f:xxxx:xxx:xxx7]>
    Destination Address: ff02::fb (ff02::fb)
    <Source or Destination Address: ff02::fb (ff02::fb)>
    <[Destination Host: ff02::fb]>
    <[Source or Destination Host: ff02::fb]>
User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353)
    Source Port: mdns (5353)
    Destination Port: mdns (5353)
    <Source or Destination Port: mdns (5353)>
    <Source or Destination Port: mdns (5353)>
    Length: 145
    Checksum: 0xa282 [correct]
        [Calculated Checksum: 0xa282]
    [Checksum Status: Good]
    [Stream index: 19]
    [Timestamps]
        [Time since first frame: 143.525585000 seconds]
        [Time since previous frame: 3.000876000 seconds]
    UDP payload (137 bytes)
Multicast Domain Name System (query)
    Transaction ID: 0x0000
        [Expert Info (Warning/Protocol): DNS query retransmission. Original request in frame 6949]
            [DNS query retransmission. Original request in frame 6949]
            <Message: DNS query retransmission. Original request in frame 6949>
             [Severity level: Warning]
            [Group: Protocol]
    Flags: 0x0000 Standard query
        0... .... .... .... = Response: Message is a query
        .000 0... .... .... = Opcode: Standard query (0)
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...0 .... .... = Recursion desired: Don't do query recursively
        .... .... .0.. .... = Z: reserved (0)
        .... .... ...0 .... = Non-authenticated data: Unacceptable
    Questions: 5
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 1
    Queries
        lb._dns-sd._udp.local: type PTR, class IN, "QM" question
            Name: lb._dns-sd._udp.local
            [Name Length: 21]
            [Label Count: 4]
            Type: PTR (domain name PoinTeR) (12)
            .000 0000 0000 0001 = Class: IN (0x0001)
            0... .... .... .... = "QU" question: False
        _companion-link._tcp.local: type PTR, class IN, "QM" question
            Name: _companion-link._tcp.local
            [Name Length: 26]
            [Label Count: 3]
            Type: PTR (domain name PoinTeR) (12)
            .000 0000 0000 0001 = Class: IN (0x0001)
            0... .... .... .... = "QU" question: False
        _raop._tcp.local: type PTR, class IN, "QM" question
            Name: _raop._tcp.local
            [Name Length: 16]
            [Label Count: 3]
            Type: PTR (domain name PoinTeR) (12)
            .000 0000 0000 0001 = Class: IN (0x0001)
            0... .... .... .... = "QU" question: False
        _airplay._tcp.local: type PTR, class IN, "QM" question
            Name: _airplay._tcp.local
            [Name Length: 19]
            [Label Count: 3]
            Type: PTR (domain name PoinTeR) (12)
            .000 0000 0000 0001 = Class: IN (0x0001)
            0... .... .... .... = "QU" question: False
        _homekit._tcp.local: type PTR, class IN, "QM" question
            Name: _homekit._tcp.local
            [Name Length: 19]
            [Label Count: 3]
            Type: PTR (domain name PoinTeR) (12)
            .000 0000 0000 0001 = Class: IN (0x0001)
            0... .... .... .... = "QU" question: False
    Additional records
        <Root>: : type OPT
            Name: <Root>
             Type: OPT (41)
            .000 0101 1010 0000 = UDP payload size: 0x05a0
            0... .... .... .... = Cache flush: False
            Higher bits in extended RCODE: 0x00
            EDNS0 version: 0
            Z: 0x1194
                0... .... .... .... = DO bit: Cannot handle DNSSEC security RRs
                .001 0001 1001 0100 = Reserved: 0x1194
            Data length: 18
            Option: Owner (reserved)
                Option Code: Owner (reserved) (4)
                Option Length: 14
                Option Data: 00 b7 6e e8 5c e4 bc 49 b6 cb bc ef 49 57
    [Retransmitted request. Original request in: 6949]
    [Retransmission: True]

All IPv6 are disabled on my Asus router and Windows 10 computer. No Public IP IPv6 on a browser. I'm not using Bluetooth always turned off. Why am I getting queries for Link Local of lb._dns-sd._udp.local, _companion-link._tcp.local, _raop._tcp.local, _airplay._tcp.local, _homekit._tcp.local

On my Asus router, someone has flashed it with a raspi software, added two partitions. One of the partition, I’m thinking goes to 192.168.50.1 and the other to 192.168.1.1, in my port forwarding appears the 192.168.1.1 nothing else. And The route table has the information on a 2nd Public IP Address then mine with a different mask.

Also on the website "ipinfo.io", It shows my public IP Address, I am wondering why there are different mask on the route Public IP Address and mask on the network Public IP Address Is a different network. First two bytes match but not after that. And is this probably why I'm having a problem with 2 Public IP Addresses coming into the modem.

On my Resource Monitor I have Network, TCP and the network mine I name. In settings of my Windows 10>Network & Internet>View Hardware & Connections. I have seen my networks name listed in the Ethernet area, then one below that say Unknown as in another network is there but unknown.

I do not have enough points to upload a photos, so I added a link and it will show the pictures I am talking about. [linktext] https://drive.google.com/drive/folders/1jy_ycM2lF3OerWblVSeGftNDNYQmJaMG?usp=sharing(https://drive.google.com/drive/folders1jy_ycM2lF3OerWblVSeGftNDNYQmJaMG?usp=sharing)

Frame 6959: 199 bytes on wire, 199 bytes captured on interface \Device\NPF_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}, id 0 Interface id: 0 (\Device\NPF_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}) Interface name: \Device\NPF_{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx} Interface description: EXTREME MIRACLES Encapsulation type: Ethernet (1) Arrival Time: Mar 27, 2022 18:48:57.122920000 Central Daylight Time [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000441000 seconds] [Time delta from previous displayed frame: 0.000441000 seconds] [Time since reference or first frame: 286.279929000 seconds] Frame Number: 6959 Frame Length: 199 bytes (1592 bits) Capture Length: 199 bytes (1592 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:udp:mdns] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: b6MyiPhone (b6MyiPhone ), Dst: IPv6mcast_fb (33:33:00:00:00:fb) Destination: IPv6mcast_fb (33:33:00:00:00:fb) <[Destination (resolved): IPv6mcast_fb]> <[Destination OUI: 33:33:00]> Address: IPv6mcast_fb (33:33:00:00:00:fb) <[Address (resolved): IPv6mcast_fb]> <[Address OUI: 33:33:00]> .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) <.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)> .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast) <.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)> Source: b6MyiPhone (b6MyiPhone ) <[Source (resolved): b6MyiPhone ]> <[Source OUI: b6]> Address:b6MyiPhone (b6MyiPhone 7) <[Address (resolved): b6MyiPhone 7]> <[Address OUI: b6:]> .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) <.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)> .... ...0 .... .... .... .... = IG bit: Individual address (unicast) <.... ...0 .... .... .... .... = IG bit: Individual address (unicast)> Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: fe80::2 (fe80::2f:7), Dst: ff02::fb (ff02::fb) 0110 .... = Version: 6 <0110 .... = Version: 6 [This field makes the filter match on "ip.version == 6" possible]> .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 0111 0000 0100 0000 0000 = Flow Label: 0x70400 Payload Length: 145 Next Header: UDP (17) Hop Limit: 255 Source Address: fe80::2f:xxxx:xxx:xxx (fe80::2f:xxxx:xxx:xxx) [Severity level: Warning] [Group: Protocol] Flags: 0x0000 Standard query 0... .... .... .... = Response: Message is a query .000 0... .... .... = Opcode: Standard query (0) .... ..0. .... .... = Truncated: Message is not truncated .... ...0 .... .... = Recursion desired: Don't do query recursively .... .... .0.. .... = Z: reserved (0) .... .... ...0 .... = Non-authenticated data: Unacceptable Questions: 5 Answer RRs: 0 Authority RRs: 0 Additional RRs: 1 Queries lb._dns-sd._udp.local: type PTR, class IN, "QM" question Name: lb._dns-sd._udp.local [Name Length: 21] [Label Count: 4] Type: PTR (domain name PoinTeR) (12) .000 0000 0000 0001 = Class: IN (0x0001) 0... .... .... .... = "QU" question: False _companion-link._tcp.local: type PTR, class IN, "QM" question Name: _companion-link._tcp.local [Name Length: 26] [Label Count: 3] Type: PTR (domain name PoinTeR) (12) .000 0000 0000 0001 = Class: IN (0x0001) 0... .... .... .... = "QU" question: False _raop._tcp.local: type PTR, class IN, "QM" question Name: _raop._tcp.local [Name Length: 16] [Label Count: 3] Type: PTR (domain name PoinTeR) (12) .000 0000 0000 0001 = Class: IN (0x0001) 0... .... .... .... = "QU" question: False _airplay._tcp.local: type PTR, class IN, "QM" question Name: _airplay._tcp.local [Name Length: 19] [Label Count: 3] Type: PTR (domain name PoinTeR) (12) .000 0000 0000 0001 = Class: IN (0x0001) 0... .... .... .... = "QU" question: False _homekit._tcp.local: type PTR, class IN, "QM" question Name: _homekit._tcp.local [Name Length: 19] [Label Count: 3] Type: PTR (domain name PoinTeR) (12) .000 0000 0000 0001 = Class: IN (0x0001) 0... .... .... .... = "QU" question: False Additional records : type OPT Name: Type: OPT (41) .000 0101 1010 0000 = UDP payload size: 0x05a0 0... .... .... .... = Cache flush: False Higher bits in extended RCODE: 0x00 EDNS0 version: 0 Z: 0x1194 0... .... .... .... = DO bit: Cannot handle DNSSEC security RRs .001 0001 1001 0100 = Reserved: 0x1194 Data length: 18 Option: Owner (reserved) Option Code: Owner (reserved) (4) Option Length: 14 Option Data: 00 b7 6e e8 5c e4 bc 49 b6 cb bc ef 49 57 [Retransmitted request. Original request in: 6949] [Retransmission: True]