|
||||||||||
| Cable Modems Gotta start somewhere and here's the place to start :) |
![]() |
|
|
LinkBack | Thread Tools |
|
|
#1 (permalink) |
|
Junior Member
Join Date: Feb 2008
Posts: 8
Thanks: 0
Thanked 0 Times in 0 Posts
|
Is this a new thing on the cmts? I can't seem to get any mac's working at all (well they all work for an hour before they cut off i've done some traffic logging and I can see why.. dhcp 6 timeouts and RSP-REG depending on if I keep a lease or not) then stuck on ranging complete afterwards.. never seen anything like it until lately.
However while I have managed to be online I have noticed i can get on ipv6 sites. Just wondering if anyone else noticed this and wondering if its related to all this new security. |
|
|
|
|
|
#2 (permalink) |
|
Junior Member
Join Date: Feb 2008
Posts: 8
Thanks: 0
Thanked 0 Times in 0 Posts
|
Here's some data I captured. No idea what the cmts is looking for in the packet sent. The only thing I can see that might have something to do with it is the series of numbers after "docsis2.0" however this is just a complete guess.
Code:
0x00260318 [DHCP Client Thread] BcmDhcpClientIf::ElapsedTimeSec: (DHCP ClientIf for IP Stack1) INFO - Lease htype=1, value=00:20:XX:XX:XX:XX current time is XXXX secs; next event time is XXXX secs
DHCPc: T1 expired again; time to retry lease renewal with client id htype=1, value=00:20:XX:XX:XX:XX
DHCPc: Sending Request packet; client id htype=1, value=00:20:XX:XX:XX:XX
0x00260322 [DHCP Client Thread] BcmDhcpClientIf::SendDhcpPacket: (DHCP ClientIf for IP Stack1) INFO - Generated DHCP settings:
DHCP Packet contents:
Type = 1
Hops = 0
Xid = 0x7d3e775a
Secs = 2475
Flags = 0
Bcast Enabled = 0
pfDhcpLeaseSettings = 0x806a0334
DHCP Lease Settings:
Is Valid = 1
DHCP Message Type = Request
Hardware Type (htype) = 1
Hardware Length (hlen) = 6
Client IP Address (ciaddr) = 10.127.XXX.XXX
Your IP Address (yiaddr) = 0.0.0.0 (primary IP address)
My offered IP address = 0.0.0.0
TFTP Server IP address (siaddr) = 0.0.0.0
Relay Agent IP address (giaddr) = 0.0.0.0
Client Hardware Address (chaddr) = 00:20:XX:XX:XX:XX
TFTP Server Name = (1 of 1 bytes) ''
Boot Filename = (1 of 21 bytes) ''
DHCP Options = (252 of 254 bytes)
(61) DHCP Client ID = htype=1, value=00:20:XX:XX:XX:XX
(55) Parameter Request List = 01 02 03 04 07 06 42 43 | ......BC
(60) Vendor Class Identifier =
64 6f 63 73 69 73 32 2e 30 3a 30 35 33 62 30 31 | docsis2.0:053b01
30 31 30 31 30 32 30 31 30 32 30 33 30 31 30 31 | 0101020102030101
30 34 30 31 30 31 30 35 30 31 30 31 30 36 30 31 | 0401010501010601
30 31 30 37 30 31 30 66 30 38 30 31 31 30 30 39 | 0107010f08011009
30 31 30 30 30 61 30 31 30 31 30 62 30 31 31 38 | 01000a01010b0118
30 63 30 31 30 31 30 64 30 32 30 30 33 37 30 65 | 0c01010d0200370e
30 32 30 30 38 66 30 66 30 31 30 31 31 30 30 34 | 02008f0f01011004
30 30 30 30 30 30 30 31 31 31 30 31 30 31 31 33 | 0000000111010113
30 31 30 31 | 0101
(43) Vendor Specific Info =
08 03 00 20 40 04 0c 30 30 31 31 32 32 33 33 34 | ... @..001122334
34 35 35 05 01 31 06 19 53 42 35 31 30 31 2d 32 | 455..1..SB5101-2
2e 37 2e 36 2e 30 2d 47 41 2d 30 30 2d 4e 4f 53 | .7.6.0-GA-00-NOS
48 07 04 32 31 36 34 09 06 53 42 35 31 30 31 0a | H..2164..SB5101.
14 4d 6f 74 6f 72 6f 6c 61 20 43 6f 72 70 6f 72 | .Motorola Corpor
61 74 69 6f 6e | ation
Full DHCP Options (raw octets):
63 82 53 63 35 01 03 37 08 01 02 03 04 07 06 42 | c.Sc5..7.......B
43 3c 84 64 6f 63 73 69 73 32 2e 30 3a 30 35 33 | C<.docsis2.0:053
62 30 31 30 31 30 31 30 32 30 31 30 32 30 33 30 | b010101020102030
31 30 31 30 34 30 31 30 31 30 35 30 31 30 31 30 | 1010401010501010
36 30 31 30 31 30 37 30 31 30 66 30 38 30 31 31 | 6010107010f08011
30 30 39 30 31 30 30 30 61 30 31 30 31 30 62 30 | 00901000a01010b0
31 31 38 30 63 30 31 30 31 30 64 30 32 30 30 33 | 1180c01010d02003
37 30 65 30 32 30 30 38 66 30 66 30 31 30 31 31 | 70e02008f0f01011
30 30 34 30 30 30 30 30 30 30 31 31 31 30 31 30 | 0040000000111010
31 31 33 30 31 30 31 2b 55 08 03 00 20 40 04 0c | 1130101+U... @..
30 30 31 31 32 32 33 33 34 34 35 35 05 01 31 06 | 001122334455..1.
19 53 42 35 31 30 31 2d 32 2e 37 2e 36 2e 30 2d | .SB5101-2.7.6.0-
47 41 2d 30 30 2d 4e 4f 53 48 07 04 32 31 36 34 | GA-00-NOSH..2164
09 06 53 42 35 31 30 31 0a 14 4d 6f 74 6f 72 6f | ..SB5101..Motoro
6c 61 20 43 6f 72 70 6f 72 61 74 69 6f 6e 3d 07 | la Corporation=.
01 00 20 40 52 a6 8c 39 02 05 dc ff | .. @R..9....
0x002603a4 [DHCP Client Thread] BcmDhcpClientIf::SendDhcpPacket: (DHCP ClientIf for IP Stack1) INFO - Generated DHCP packet:
Ethernet Frame Header: (Format is Ethernet II/DIX)
DestAddr=00:18:XX:XX:XX:XX; SrcAddr=00:20:XX:XX:XX:XX; EtherType=0x800 (IP)
IP Frame Header:
Ver=4; HdrLen=20 bytes; ToS=0; ProtType=17 (UDP); DestIP=62.31.XX.XX; SrcIP=10.127.XXX.XXX
TCP/UDP Frame Header: DestPort=67 (0x43); SrcPort=68 (0x44)
Raw buffer octets: (530 bytes)
00 18 74 e7 a4 01 00 20 40 52 a6 8c 08 00 45 00 | ..t.... @R....E.
02 04 de ad 00 00 80 11 df 66 0a 7f f1 c2 3e 1f | .........f....>.
40 74 00 44 00 43 01 f0 52 73 01 01 06 00 7d 3e | @t.D.C..Rs....}>
77 5a 09 ab 00 00 0a 7f f1 c2 00 00 00 00 00 00 | wZ..............
00 00 00 00 00 00 00 20 40 52 a6 8c 00 00 00 00 | ....... @R......
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00 00 00 00 00 00 63 82 53 63 35 01 03 37 08 01 | ......c.Sc5..7..
02 03 04 07 06 42 43 3c 84 64 6f 63 73 69 73 32 | .....BC<.docsis2
2e 30 3a 30 35 33 62 30 31 30 31 30 31 30 32 30 | .0:053b010101020
31 30 32 30 33 30 31 30 31 30 34 30 31 30 31 30 | 1020301010401010
35 30 31 30 31 30 36 30 31 30 31 30 37 30 31 30 | 5010106010107010
66 30 38 30 31 31 30 30 39 30 31 30 30 30 61 30 | f0801100901000a0
31 30 31 30 62 30 31 31 38 30 63 30 31 30 31 30 | 1010b01180c01010
64 30 32 30 30 33 37 30 65 30 32 30 30 38 66 30 | d0200370e02008f0
66 30 31 30 31 31 30 30 34 30 30 30 30 30 30 30 | f010110040000000
31 31 31 30 31 30 31 31 33 30 31 30 31 2b 55 08 | 1110101130101+U.
03 00 20 40 04 0c 30 30 31 31 32 32 33 33 34 34 | .. @..0011223344
35 35 05 01 31 06 19 53 42 35 31 30 31 2d 32 2e | 55..1..SB5101-2.
37 2e 36 2e 30 2d 47 41 2d 30 30 2d 4e 4f 53 48 | 7.6.0-GA-00-NOSH
07 04 32 31 36 34 09 06 53 42 35 31 30 31 0a 14 | ..2164..SB5101..
4d 6f 74 6f 72 6f 6c 61 20 43 6f 72 70 6f 72 61 | Motorola Corpora
74 69 6f 6e 3d 07 01 00 20 40 52 a6 8c 39 02 05 | tion=... @R..9..
dc ff | ..
0x00260426 [DHCP Client Thread] BcmDhcpClientIf::SendRequest: (DHCP ClientIf for IP Stack1) INFO - Packet sent successfully!
0x00260426 [DHCP Client Thread] BcmDhcpClientIf::SendRequest: (DHCP ClientIf for IP Stack1) INFO - This is try number 0; wait time = 337 sec; fuzz amount = 0
0x00260426 [DHCP Client Thread] BcmDhcpClientThread::CallbackRequest: (DHCP Client Thread) INFO - Received request for async callback 337 seconds from now from clientIf 0x806a0490
0x00260426 [DHCP Client Thread] BcmDhcpClientThread::ThreadMain: (DHCP Client Thread) INFO - No more client timers; switching out of timeout mode.
0x00260430 [DHCP Client Thread] BcmDhcpClientThread::ThreadMain: (DHCP Client Thread) INFO - Client callback request: waitStartTimeMs = 2491430ms; timerDurationMs = 337000ms; clientIf = 0x806a0490
0x00260430 [DHCP Client Thread] BcmDhcpClientThread::ThreadMain: (DHCP Client Thread) INFO - Shortest remaining client timer is 336990ms...
CM/IpHal>
|
|
|
|
|
|
#3 (permalink) |
|
Senior Member
Join Date: Apr 2009
Location: Birmingham
Posts: 190
Thanks: 29
Thanked 30 Times in 25 Posts
|
hi demon i cant give you anything firm but i found using sigma that changing the serial number of the modem when you change your mac addy and go through the spoofing nic and alike beats the hour cut off issue got a number of pals that are still on and working for months using this method if that helps
|
|
|
|
|
|
#4 (permalink) |
|
Junior Member
Join Date: Feb 2008
Posts: 8
Thanks: 0
Thanked 0 Times in 0 Posts
|
seems to be a lot of different information at the moment, so far i've been told using a mac from a different cpc instead of UBR will work, stealth settings need reconfigured and using a different firmware as you say might help.
Anyway, going to try a few other things out and see how I get on with it. |
|
|
|
![]() |
| Bookmarks |
| Thread Tools | |
|
|
| LinkBack |
LinkBack URL |
About LinkBacks |
| Bookmark & Share |
Digg this Thread! |
Add Thread to del.icio.us |
Bookmark in Technorati |
Tweet this thread |
