Article View: chi.internet
Article #74MacBook weidness
From: Mark Anderson
Date: Thu, 21 Feb 2013 03:59
Date: Thu, 21 Feb 2013 03:59
23 lines
2960 bytes
2960 bytes
I don't know where to post for info about this so I thought maybe someone here might have some insight or point me in the right direction. Awhile ago I posted about my open wireless science project. Today I got MDNS IPv6 packet blasts from three different MacBook pros, one who is my neighbor who cannot possibly know that her computer is doing this. An MDNS packet blast (my term) is a device that continuously broadcasts MDNS packets at a very high rate and will do so until the access point they're connected to power cycles. I have mechanisms that automatically shutdown the network when this happens but it's a PITA because I have to go manually power cycle the AP assigned to the offender. It always has been the same AP which is an el cheapo no name from Microcenter. I haven't ruled out the AP going nuts too but why only on MacBooks? This has happened in the past and I have become used to it every now and then (maybe twice a month). Today it happened three times so I investigated more and realized something must be going on with the MacBooks for them to do this. Could this be some kind of malware or a simple bug in its IPv6 stack? My network is a bunch of el cheapo wifi routers used as dumb access points all switched to a dual port Linux box set up as a firewall/proxy/gateway. I am now a bit more curious thus this post.
Technical Details
Message-ID:
<MPG.2b8f65ac3d0bcab3989a89@news.speakeasy.net>Path:
arc1-ca.pugleaf.net!g1ni23496wig.0!nntp.google.com!goblin2!goblin3!goblin.stu.neva.ru!news.ripco.com!news.glorb.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!border3.nntp.dca.giganews.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local2.nntp.dca.giganews.com!nntp.megapath.net!news.megapath.net.POSTED!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Thread: 837b0c45a0,4161bdfa34ad1ceb,start
X-Google-Attributes: gid837b0c45a0,public,usenet
X-Google-NewGroupId: yes
X-Google-Language: ENGLISH,ASCII-7-bit
X-Received: by 10.180.94.41 with SMTP id cz9mr4105613wib.1.1361419202584;
Wed, 20 Feb 2013 20:00:02 -0800 (PST)
Path: arc1-ca.pugleaf.net!g1ni23496wig.0!nntp.google.com!goblin2!goblin3!goblin.stu.neva.ru!news.ripco.com!news.glorb.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!border3.nntp.dca.giganews.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local2.nntp.dca.giganews.com!nntp.megapath.net!news.megapath.net.POSTED!not-for-mail
NNTP-Posting-Date: Wed, 20 Feb 2013 22:00:01 -0600
From: Mark Anderson <mea@nospambradnylion.com>
Newsgroups: chi.internet
Subject: MacBook weidness
Date: Wed, 20 Feb 2013 22:59:29 -0500
Message-ID: <MPG.2b8f65ac3d0bcab3989a89@news.speakeasy.net>
MIME-Version: 1.0
User-Agent: MicroPlanet-Gravity/3.0.4
Lines: 24
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 66.92.134.90
X-Trace: sv3-HMG5IzgO/zk04Jpfh2goJ8o6LpyeKQJ3QoiQCMQQM4keZZ0A71iV3L1mQ1LjVhgTNn3PHPkF8SAWnqv!w4VyLqgnu1SNW4FDFfMqP6PQvC93Jfw/tKUpC3636ZRv8icrQyw6u9MwTxK6Rtnqp9hhAiBpcXuf!luCv2NdrTTI/56rDmMlSEU7ZZO+g
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.40
X-Original-Bytes: 2342
X-Received-Bytes: 2483
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit