What's new

Stumped by communications w/ smart plug

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

JaimeZX

Senior Member
Hey guys, hoping you can help me figure this one out.

The only packets I can find going to/from my smart plugs (in both Wireshark and tcpdump from an SSH session in my router) are UDP from the plugs (from plug IP to 255.255.255.0) and an occasional ARP ("Who has other internal IP") which happens to be that of my cell phone. Meanwhile, from my cell I am commanding the plugs on and off and I see no evidence of this either from monitoring my cell IP-or-MAC in Wireshark or from monitoring the plug IPs-or-MACs... So I am confused.

I also tried loading a few web pages and Facebook in the phone and Wireshark seems to have disregarded all of those packets as well, except for a couple of MDNS queries. So I am confus.

Ideas?
 
Yeah, I've seen that somewhere, so the lack of traffic on tcpdump shouldn't be surprising, but I don't know why Wireshark isn't seeing it? :dunno:
 
This is normal. Wireshark can only see traffic that is sent to its network interface. A switch (like the LAN ports of your router) only forwards traffic through the port that the target device is connected to (as determined by the MAC address table). The exception being when the switch doesn't already have an entry for the target in its MAC address table, or it is broadcast traffic (i.e. ARP). In those cases the switch sends the traffic to all ports as part of the discovery process.

In short, you need to be running Wireshark on the source or target device to see the traffic.
 
Isn't that the point of Promiscuous Mode in Wireshark? I'm away from my home network right now so I can't mess with it, but I (was) pretty sure it was supposed to be seeing "all the things."

Suggestions? Trying to see what the "turn off" packet looks like so I can set up Tasker to turn off lights with certain cues.
 
Isn't that the point of Promiscuous Mode in Wireshark?
Sort of. Yes, promiscuous mode will allow your PC's NIC to pass all traffic it receives to Wireshark. But the point is that the router isn't sending the traffic you're interested in to the NIC in the first place.
 

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top