AppleTVs create a chatty alternate WiFi network





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







1















I've been trying to analyze some WiFi issues in my house using airodump-ng and noticed that there's a lot of traffic on a BSSID beginning with 00:25:00, which Wireshark's OUI lookup says is assigned to Apple... but the BSSID doesn't match any network I have, and the SSIDs don't match any of the devices.



How do I know it's an AppleTV? When I bring the scanner near one of them, its signal goes from the -60 dBm range to the -30 dBm range. I repeat for the other two Apple TVs and their signals go down as well.



The reported SSIDs don't match any device I have on my network and the BSSID they're "connected" to isn't any device I have (in fact, I don't currently have any Apple APs).



These devices seem very chatty. While watching a YouTube video one one AppleTV, airodump-ng reported a few thousand frames from the AppleTV's real SSID, and 10k frames between the three other SSIDs.



Why are the AppleTVs making their own network and why are they so chatty?






appletv







share|improve this question





























    1















    I've been trying to analyze some WiFi issues in my house using airodump-ng and noticed that there's a lot of traffic on a BSSID beginning with 00:25:00, which Wireshark's OUI lookup says is assigned to Apple... but the BSSID doesn't match any network I have, and the SSIDs don't match any of the devices.



    How do I know it's an AppleTV? When I bring the scanner near one of them, its signal goes from the -60 dBm range to the -30 dBm range. I repeat for the other two Apple TVs and their signals go down as well.



    The reported SSIDs don't match any device I have on my network and the BSSID they're "connected" to isn't any device I have (in fact, I don't currently have any Apple APs).



    These devices seem very chatty. While watching a YouTube video one one AppleTV, airodump-ng reported a few thousand frames from the AppleTV's real SSID, and 10k frames between the three other SSIDs.



    Why are the AppleTVs making their own network and why are they so chatty?






    appletv







    share|improve this question

























      1












      1








      1








      I've been trying to analyze some WiFi issues in my house using airodump-ng and noticed that there's a lot of traffic on a BSSID beginning with 00:25:00, which Wireshark's OUI lookup says is assigned to Apple... but the BSSID doesn't match any network I have, and the SSIDs don't match any of the devices.



      How do I know it's an AppleTV? When I bring the scanner near one of them, its signal goes from the -60 dBm range to the -30 dBm range. I repeat for the other two Apple TVs and their signals go down as well.



      The reported SSIDs don't match any device I have on my network and the BSSID they're "connected" to isn't any device I have (in fact, I don't currently have any Apple APs).



      These devices seem very chatty. While watching a YouTube video one one AppleTV, airodump-ng reported a few thousand frames from the AppleTV's real SSID, and 10k frames between the three other SSIDs.



      Why are the AppleTVs making their own network and why are they so chatty?






      appletv







      share|improve this question














      I've been trying to analyze some WiFi issues in my house using airodump-ng and noticed that there's a lot of traffic on a BSSID beginning with 00:25:00, which Wireshark's OUI lookup says is assigned to Apple... but the BSSID doesn't match any network I have, and the SSIDs don't match any of the devices.



      How do I know it's an AppleTV? When I bring the scanner near one of them, its signal goes from the -60 dBm range to the -30 dBm range. I repeat for the other two Apple TVs and their signals go down as well.



      The reported SSIDs don't match any device I have on my network and the BSSID they're "connected" to isn't any device I have (in fact, I don't currently have any Apple APs).



      These devices seem very chatty. While watching a YouTube video one one AppleTV, airodump-ng reported a few thousand frames from the AppleTV's real SSID, and 10k frames between the three other SSIDs.



      Why are the AppleTVs making their own network and why are they so chatty?






      appletv




      appletv






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked 42 mins ago









      iAdjunctiAdjunct

      1,118614




      1,118614






















          2 Answers
          2






          active

          oldest

          votes


















          2














          They are likely packets for Airplay, since that works over an Ad-Hoc Wireless network



          Reference - https://en.wikipedia.org/wiki/AirPlay






          share|improve this answer































            1














            When I look at the packets in Wireshark, they are unencrypted and contain IPv6 multicast messages advertising airplay. They also contain data on the type of device, device capabilities, and who knows what other data.



            At the very least, it does not appear to contain the AppleID used in plain text, so there's a plus, but I can't guarantee it's not hidden/encoded somewhere else.






            share|improve this answer
























            • Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

              – CaldeiraG
              3 mins ago












            Your Answer








            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "3"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














            draft saved

            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1426854%2fappletvs-create-a-chatty-alternate-wifi-network%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            2 Answers
            2






            active

            oldest

            votes








            2 Answers
            2






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            2














            They are likely packets for Airplay, since that works over an Ad-Hoc Wireless network



            Reference - https://en.wikipedia.org/wiki/AirPlay






            share|improve this answer




























              2














              They are likely packets for Airplay, since that works over an Ad-Hoc Wireless network



              Reference - https://en.wikipedia.org/wiki/AirPlay






              share|improve this answer


























                2












                2








                2







                They are likely packets for Airplay, since that works over an Ad-Hoc Wireless network



                Reference - https://en.wikipedia.org/wiki/AirPlay






                share|improve this answer













                They are likely packets for Airplay, since that works over an Ad-Hoc Wireless network



                Reference - https://en.wikipedia.org/wiki/AirPlay







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered 34 mins ago









                LawrenceLawrence

                3,247816




                3,247816

























                    1














                    When I look at the packets in Wireshark, they are unencrypted and contain IPv6 multicast messages advertising airplay. They also contain data on the type of device, device capabilities, and who knows what other data.



                    At the very least, it does not appear to contain the AppleID used in plain text, so there's a plus, but I can't guarantee it's not hidden/encoded somewhere else.






                    share|improve this answer
























                    • Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                      – CaldeiraG
                      3 mins ago
















                    1














                    When I look at the packets in Wireshark, they are unencrypted and contain IPv6 multicast messages advertising airplay. They also contain data on the type of device, device capabilities, and who knows what other data.



                    At the very least, it does not appear to contain the AppleID used in plain text, so there's a plus, but I can't guarantee it's not hidden/encoded somewhere else.






                    share|improve this answer
























                    • Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                      – CaldeiraG
                      3 mins ago














                    1












                    1








                    1







                    When I look at the packets in Wireshark, they are unencrypted and contain IPv6 multicast messages advertising airplay. They also contain data on the type of device, device capabilities, and who knows what other data.



                    At the very least, it does not appear to contain the AppleID used in plain text, so there's a plus, but I can't guarantee it's not hidden/encoded somewhere else.






                    share|improve this answer













                    When I look at the packets in Wireshark, they are unencrypted and contain IPv6 multicast messages advertising airplay. They also contain data on the type of device, device capabilities, and who knows what other data.



                    At the very least, it does not appear to contain the AppleID used in plain text, so there's a plus, but I can't guarantee it's not hidden/encoded somewhere else.







                    share|improve this answer












                    share|improve this answer



                    share|improve this answer










                    answered 35 mins ago









                    iAdjunctiAdjunct

                    1,118614




                    1,118614













                    • Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                      – CaldeiraG
                      3 mins ago



















                    • Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                      – CaldeiraG
                      3 mins ago

















                    Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                    – CaldeiraG
                    3 mins ago





                    Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                    – CaldeiraG
                    3 mins ago


















                    draft saved

                    draft discarded




















































                    Thanks for contributing an answer to Super User!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid …



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1426854%2fappletvs-create-a-chatty-alternate-wifi-network%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    -

                    Popular posts from this blog

                    Ponta tanko

                    Image
                    Usona ponta tanko M60A1 Ponta tanko estas, simile kiel kirasita savveturilo, inter specialaj kirasitaj transportiloj. Kiel pontaj tankoj eblas konsideri ĉiujn memmovigaj rimedoj ebligantaj superi obstaklojn ĝis larĝeco 24 metroj rekte en spaco de bataloperacoj. Ties ĉefa tasko estas ebligi al la propraj taĉmentoj daŭrigi en rapida antaŭenirado sen senbezona reteniĝo. El tio pli-malpli rezultas taktikaj-teknikaj postuloj, kiujn ili devas plenumi. Precipe temas pri kapablo operacii komune kun unue-sinsekvaj taĉmentoj kaj transpontigi obstaklojn dum kelke da minutoj. This page is only for reference, If you need detailed information, please check here
                    Read more

                    Tantalo (mitologio)

                    Image
                    Ĉi tiu artikolo temas pri mitologio. Por aliaj signifoj vidu la paĝon Tantalo (apartigilo) . Tantalo , laŭ Gioacchino Assereto. Laŭ la helena mitologio, Tantalo (el la greka Τάνταλος , ŝancelanta aŭ tre malfeliĉa ) estis filo de Zeŭso kaj la oceanidino Pluto, laŭ la plej divastigata versio. Li estis reĝo de Frigio [1] aŭ de la monto Sipilo, en Lidio (Malgrandazio) [2] kaj post sia morto li suferis eternan torturadon ĉe la Tartaro, la plej profunda parto de Hadeso, rezervita por la plej perversaj homoj. Tamen, kelkaj rakontoj asertas ke li estis reĝo de Argo aŭ de Korinto [3] , aŭ ke li migris norden el la monto Sipilo por akiri la tronon de Paflagonio, el kie Ilo forpelis lin pro tio, ke Tantalo forkaptis kaj seksperfortis lian fraton Ganimedon [4] , kaj tiel ofendis la diojn. Verŝajne li ankaŭ regis urbon en okcidenta Anatolio, kiun oni nomis Tantalis [5] pro li, aŭ Sipilo , pro la monto sur kies flanko ankoraŭ staras ĝiaj ruinaĵoj [6] . Laŭ la geografiisto Strabo,...
                    Read more

                    Erzsébet Schaár

                    Image
                    Erzsébet Schaár Memportreto de Erzsébet Schaár en Pécs Personaj informoj Naskiĝo 27-an de julio 1908 ( 1908-07-27 ) en Budafok Morto 29-an de aŭgusto 1975 ( 1975-08-29 ) (67-jara) en Budapeŝto Ŝtataneco Hungario Profesio skulptisto Familianoj Edz(in)o Tibor Vilt v   •   d   •   r Erzsébet Schaár [erĵEbet ŝAr], laŭ hungarlingve kutima sinsekvo Schaár Erzsébet estis hungara skulptisto. Ŝia edzo estis Tibor Vilt. Déryné Széppataki Róza en Miskolc fare de Erzsébet Schaár Erzsébet Schaár [1] naskiĝis la 27-an de julio 1908 en Budafok, ŝi mortis la 29-an de aŭgusto 1975 en Budapeŝto. Enhavo 1 Biografio 2 Elektitaj solaj ekspozicioj 3 Elektitaj kolektivaj ekspozicioj 4 Elektitaj skulptaĵoj 5 Elektitaj disĉiploj 6 Fontoj 7 Referencoj Biografio | Erzsébet Schaár studis en Industriarta Lernejo, poste en Reĝa Belarta Altlernejo (1924-1926). Ŝia ĉefinstruisto estis Zsig...
                    Read more