e4 mDNS flood

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

e4 mDNS flood

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

e4 mDNS flood

6b6561

LV1

2020-04-06 07:02:36 - last edited 2020-04-07 06:58:25

Posts: 17

Helpful: 2

Solutions: 0

Stories: 0

Registered: 2020-04-02

e4 mDNS flood

2020-04-06 07:02:36 - last edited 2020-04-07 06:58:25

The e4 in AP mode send's out a mDNS in-addr.arpa. request every 20th second. I'm not sure if these are only sent on the ethernet or also on the wireless side, currently I'm not able to capture network traffic on a wifi device in order to test that.

The requests are not only for associated WiFi clients, the requests are sent for all IP's seen on the local network.

09:03:01.767859 IP 192.168.0.245.44228 > 224.0.0.251.5353: 20761 PTR (QM)? 192.168.0.145.in-addr.arpa. (44)
09:03:21.065314 IP 192.168.0.245.57329 > 224.0.0.251.5353: 20781 PTR (QM)? 192.168.0.145.in-addr.arpa. (44)
09:03:41.207972 IP 192.168.0.245.42390 > 224.0.0.251.5353: 20801 PTR (QM)? 192.168.0.145.in-addr.arpa. (44)

Could this be stopped in the next firmware?

1 Accepted Solution

Kevin_Z

2020-04-07 06:58:04 - last edited 2020-04-07 06:58:25

Posts: 21206

Helpful: 4360

Solutions: 2502

Stories: 20

Registered: 2018-12-24

Re:e4 mDNS flood-Solution

2020-04-07 06:58:04 - last edited 2020-04-07 06:58:25

@6b6561

Hi, this mDNS in-addr.arpa. request is normal, it is used to indicate the local DNS, displaying the corresponding relations between the domain name of local devices and its IP address.

Good day.

TP-Link Annual Community Survey | Help Shape Our Community Throughout 2024!

Information

Helpful: 0

Replies: 2

e4 mDNS flood

e4 mDNS flood

Information

Voters 0

Tags