这是一个创建于 432 天前的主题，其中的信息可能已经有所发展或是发生改变。
最近连公寓的 WIFI 之后无论什么设备（手机，mac ，台式）都会在没有任何数据传输的情况下不断的接收 100-200kb/s 的数据，导致手机电池耗电飞快，一个晚上能跑 1 个 g 的下行流量，应该是我这楼层公寓路由器的问题。链接 reception 和部分楼层的情况下是正常的，链接学校 WIFI 也是正常的，并不会无故接收。 请问这个样子是因为什么原因呢？是因为公寓路由器设置有问题吗？基本上都显示流量经过 mDNSresponder （ mac ）和 MulticastDNSResponder （ android ）.
 |
1
Zy143L 2023-09-21 01:09:49 +08:00 via Android
抓包看看情况咯
可能局域网有不停的探测 |
 |
3
albert91 2023-09-21 02:06:43 +08:00
抓包，屏蔽呗
可以自己用个路由当二级路由，桥接公寓 wifi ，ap-centre 模式 |
 |
4
iceheart 2023-09-21 06:08:54 +08:00 via Android
pc 上 wireshark 抓包
|
 |
5
wanwaneryide 2023-09-21 09:20:27 +08:00
路由器还能控制手机收发数据？我能想到的就是路由器太拉，手机反反复复重传数据啥的，但是你有没说网络有问题，就想不通了
|
 |
6
maybeonly 2023-09-21 09:21:56 +08:00
有人在发组播/广播玩儿？
疯狂扫 arp 之类的 不行就套个二级路由吧 |
 |
7
zmcity 2023-09-21 09:48:28 +08:00
看上去像设备太多了，ARP/DHCP 风暴。
|
 |
9
harbour OP @wanwaneryide 网络是没问题的，很稳定，在部分楼层和另一栋楼是不会有这样莫名其妙的下行数据，很奇怪
|
|
11
harbour OP @maybeonly
@zmcity 这里是部分的抓，请问能看出来什么吗 1 0.000000 10.93.7.144 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 2 0.000001 10.93.7.144 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 3 0.000354 0a:1f:b1:95:98:e6 Apple_b7:24:a0 LLC 137 S P, func=RNR, N(R)=64; DSAP NULL LSAP Individual, SSAP NULL LSAP Command 4 0.000355 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 5 0.000355 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 6 0.001838 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 7 0.001839 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 8 0.001839 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 9 0.001839 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 10 0.001840 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 11 0.001840 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 12 0.001840 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 13 0.001840 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 14 0.001841 10.93.11.213 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 15 0.001841 10.93.7.123 224.0.0.251 MDNS 570 Standard query response 0x0000 TXT PTR Keighra’s iPad._rdlink._tcp.local TXT, cache flush PTR Keighra’s iPad._companion-link._tcp.local TXT, cache flush SRV, cache flush 0 0 49153 Keighras-iPad.local AAAA, cache flush fe80::1815:879c:3f0a:20a6 A, cache flush 10.93.7.123 SRV, cache flush 0 0 53994 Keighras-iPad.local NSEC, cache flush Keighra’s iPad._rdlink._tcp.local NSEC, cache flush Keighras-iPad.local NSEC, cache flush Keighra’s iPad._companion-link._tcp.local 16 0.001842 10.93.15.18 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 17 0.001842 10.93.0.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QU" question 18 0.002002 10.93.0.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QU" question 19 0.002002 10.93.15.18 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 20 0.003487 10.93.7.144 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 21 0.003487 10.93.4.13 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 22 0.003487 10.93.7.97 224.0.0.251 MDNS 86 Standard query response 0x0000 A, cache flush 10.93.7.97 23 0.003488 10.93.19.147 224.0.0.251 MDNS 88 Standard query response 0x0000 A, cache flush 10.93.19.147 24 0.003488 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 25 0.003488 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 26 0.003488 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 27 0.003489 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 28 0.003489 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 29 0.003489 10.93.6.200 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 30 0.003489 10.93.11.79 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31 0.003490 10.93.11.79 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 32 0.005491 IntelCor_d2:aa:69 Apple_b7:24:a0 ARP 56 Who has 10.93.19.193? Tell 10.93.17.168 33 0.005491 10.93.14.146 224.0.0.251 MDNS 88 Standard query response 0x0000 A, cache flush 10.93.14.146 34 0.005493 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 35 0.005494 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 36 0.005494 10.93.11.249 224.0.0.251 MDNS 88 Standard query response 0x0000 A, cache flush 10.93.11.249 37 0.005494 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 38 0.005494 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 39 0.005495 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 40 0.005495 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 41 0.005495 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 42 0.005496 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 43 0.005496 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 44 0.005496 10.93.4.228 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question |
|
12
harbour OP @zmcity
@maybeonly 这也是一部分 31053 3.533768 Microsof_31:5b:2f Apple_b7:24:a0 ARP 56 Who has 10.93.8.102? Tell 10.93.16.68 31054 3.533768 10.93.11.213 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31055 3.533769 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31056 3.533769 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31057 3.533769 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31058 3.533770 10.93.5.116 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31059 3.533770 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31060 3.533770 10.93.5.116 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31061 3.533770 10.93.4.228 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31062 3.533771 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31063 3.533771 10.93.11.213 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31064 3.533771 10.93.12.173 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31065 3.533772 10.93.4.228 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31066 3.533772 10.93.4.228 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31067 3.534233 10.93.4.13 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31068 3.534233 10.93.12.173 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31069 3.535774 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31070 3.535774 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31071 3.535775 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31072 3.535775 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31073 3.535775 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31074 3.535775 10.93.8.97 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31075 3.535776 c6:ed:2f:5e:43:5b Apple_b7:24:a0 ARP 56 Who has 10.93.13.206? Tell 10.93.1.154 31076 3.535796 10.93.4.13 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31077 3.535796 10.93.21.229 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31078 3.536186 10.93.4.16 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31079 3.536187 10.93.4.16 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31080 3.536659 10.93.4.16 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31081 3.536659 10.93.4.16 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31082 3.536660 10.93.4.16 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31083 3.538889 10.93.21.229 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31084 3.538890 10.93.21.229 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31085 3.538890 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31086 3.538890 10.93.21.229 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31087 3.538891 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31088 3.538891 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31089 3.538891 ce:59:c7:0e:cc:63 Apple_b7:24:a0 ARP 56 Who has 10.93.12.113? Tell 10.93.21.143 31090 3.538891 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.20.67? Tell 10.93.9.135 31091 3.538892 12:a6:38:a2:32:85 Apple_b7:24:a0 ARP 56 Who has 10.93.13.204? Tell 10.93.5.14 31092 3.538892 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.12.142? Tell 10.93.9.135 31093 3.540458 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.2.231? Tell 10.93.9.135 31094 3.540459 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.21.143? Tell 10.93.9.135 31095 3.540459 10.93.6.200 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31096 3.540460 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.20.92? Tell 10.93.9.135 31097 3.540460 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.10.75? Tell 10.93.9.135 31098 3.540460 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.8.203? Tell 10.93.9.135 31099 3.540460 10.93.4.13 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 31100 3.540461 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.8.102? Tell 10.93.9.135 31101 3.540461 10.93.7.9 239.255.255.250 SSDP 167 M-SEARCH * HTTP/1.1 19508 4.020489 10.93.4.228 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 19509 4.021418 10.93.7.144 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 19510 4.023147 AmazonTe_b0:23:d3 Apple_b7:24:a0 ARP 56 Who has 10.93.6.32? Tell 10.93.8.29 19511 4.023147 AmazonTe_5f:ca:59 Apple_b7:24:a0 ARP 56 Who has 10.93.5.54? Tell 10.93.8.168 19512 4.024282 12:3f:46:9c:89:f8 Apple_b7:24:a0 ARP 56 Who has 10.93.24.240? Tell 10.93.8.163 19513 4.025558 AmazonTe_2d:b6:a1 Apple_b7:24:a0 ARP 56 Who has 10.93.7.169? Tell 10.93.11.143 19514 4.025559 AmazonTe_2d:b6:a1 Apple_b7:24:a0 ARP 56 Who has 10.93.24.90? Tell 10.93.11.143 19515 4.027119 10.93.11.79 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 19516 4.027950 10.93.11.79 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 19517 4.028021 AmazonTe_1a:5a:d5 Apple_b7:24:a0 ARP 56 Who has 10.93.22.203? Tell 10.93.18.136 19518 4.028830 AmazonTe_50:5a:6b Apple_b7:24:a0 ARP 56 Who has 10.93.12.57? Tell 10.93.15.26 19519 4.028830 AmazonTe_2a:34:e6 Apple_b7:24:a0 ARP 56 Who has 10.93.24.90? Tell 10.93.8.175 19520 4.031189 5e:25:bd:47:c2:d2 Apple_b7:24:a0 ARP 56 Who has 10.93.6.32? Tell 10.93.9.45 19521 4.031623 10.93.10.222 224.0.0.251 MDNS 348 Standard query response 0x0000 TXT PTR HUAWEI Matepad 11._rdlink._tcp.local TXT, cache flush SRV, cache flush 0 0 49157 HUAWEI-Matepad-11.local AAAA, cache flush fe80::c6d:d1ba:b031:3e92 A, cache flush 10.93.10.222 NSEC, cache flush HUAWEI Matepad 11._rdlink._tcp.local NSEC, cache flush HUAWEI-Matepad-11.local 19522 4.031914 Microsof_7b:cc:db Apple_b7:24:a0 ARP 56 Who has 10.93.22.95? Tell 10.93.6.163 19523 4.032192 AmazonTe_12:20:58 Apple_b7:24:a0 ARP 56 Who has 10.93.22.203? Tell 10.93.2.179 19524 4.032642 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 19525 4.032643 10.93.11.213 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 19526 4.033170 10.93.5.116 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question 19527 4.033427 AmazonTe_1d:e1:fc Apple_b7:24:a0 ARP 56 Who has 10.93.14.231? Tell 10.93.12.116 19528 4.033776 10.93.21.229 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question |
 |
15
strp 2023-09-22 00:31:51 +08:00
mDNS 是 Windows SB 可以关
https://superuser.com/questions/1588938/does-smart-multi-homed-name-resolution-smhnr-exist-in-windows-10-home macOS 我没用过 但是看起来好像需要关闭 SIP 才能禁用，这就有点。。 https://apple.stackexchange.com/questions/344163/how-to-or-is-that-possible-to-stop-mdnsresponder-without-disable-system-integrit ARP 感觉应该不怎么吃流量 但是如果一直发那也不是没可能 你标记一下 SamsungE_xxxxx 和 AmazonTe_xxxxxx 那些设备到底是什么，如果觉得有必要并且有条件，可以新建一个访客隔离的 WiFi 给那些设备用，防止它们一直发 ARP 。 |
|
16
harbour OP @strp 谢谢建议，但是这是公寓的网我动不了，这些是公寓其他用户的设备，有一些国人的设备可以直接看到汉字名字。已经跟公寓报告了，他们说会报告上去，我慢慢等吧。再次感谢你的建议🙏
|
|
17
zmcity 2023-09-22 11:20:58 +08:00
看起来确实是网段太大导致的，你的 arp 包看起来收了 10.93.0.0/16 的包，正常一个网段不应该超过 /24 ，超过的话广播包就是这样的，这个问题在你的这个场景下只能找管理方解决。
|
Select Language