AppleTVs create a chatty alternate WiFi network





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







1















I've been trying to analyze some WiFi issues in my house using airodump-ng and noticed that there's a lot of traffic on a BSSID beginning with 00:25:00, which Wireshark's OUI lookup says is assigned to Apple... but the BSSID doesn't match any network I have, and the SSIDs don't match any of the devices.



How do I know it's an AppleTV? When I bring the scanner near one of them, its signal goes from the -60 dBm range to the -30 dBm range. I repeat for the other two Apple TVs and their signals go down as well.



The reported SSIDs don't match any device I have on my network and the BSSID they're "connected" to isn't any device I have (in fact, I don't currently have any Apple APs).



These devices seem very chatty. While watching a YouTube video one one AppleTV, airodump-ng reported a few thousand frames from the AppleTV's real SSID, and 10k frames between the three other SSIDs.



Why are the AppleTVs making their own network and why are they so chatty?










share|improve this question





























    1















    I've been trying to analyze some WiFi issues in my house using airodump-ng and noticed that there's a lot of traffic on a BSSID beginning with 00:25:00, which Wireshark's OUI lookup says is assigned to Apple... but the BSSID doesn't match any network I have, and the SSIDs don't match any of the devices.



    How do I know it's an AppleTV? When I bring the scanner near one of them, its signal goes from the -60 dBm range to the -30 dBm range. I repeat for the other two Apple TVs and their signals go down as well.



    The reported SSIDs don't match any device I have on my network and the BSSID they're "connected" to isn't any device I have (in fact, I don't currently have any Apple APs).



    These devices seem very chatty. While watching a YouTube video one one AppleTV, airodump-ng reported a few thousand frames from the AppleTV's real SSID, and 10k frames between the three other SSIDs.



    Why are the AppleTVs making their own network and why are they so chatty?










    share|improve this question

























      1












      1








      1








      I've been trying to analyze some WiFi issues in my house using airodump-ng and noticed that there's a lot of traffic on a BSSID beginning with 00:25:00, which Wireshark's OUI lookup says is assigned to Apple... but the BSSID doesn't match any network I have, and the SSIDs don't match any of the devices.



      How do I know it's an AppleTV? When I bring the scanner near one of them, its signal goes from the -60 dBm range to the -30 dBm range. I repeat for the other two Apple TVs and their signals go down as well.



      The reported SSIDs don't match any device I have on my network and the BSSID they're "connected" to isn't any device I have (in fact, I don't currently have any Apple APs).



      These devices seem very chatty. While watching a YouTube video one one AppleTV, airodump-ng reported a few thousand frames from the AppleTV's real SSID, and 10k frames between the three other SSIDs.



      Why are the AppleTVs making their own network and why are they so chatty?










      share|improve this question














      I've been trying to analyze some WiFi issues in my house using airodump-ng and noticed that there's a lot of traffic on a BSSID beginning with 00:25:00, which Wireshark's OUI lookup says is assigned to Apple... but the BSSID doesn't match any network I have, and the SSIDs don't match any of the devices.



      How do I know it's an AppleTV? When I bring the scanner near one of them, its signal goes from the -60 dBm range to the -30 dBm range. I repeat for the other two Apple TVs and their signals go down as well.



      The reported SSIDs don't match any device I have on my network and the BSSID they're "connected" to isn't any device I have (in fact, I don't currently have any Apple APs).



      These devices seem very chatty. While watching a YouTube video one one AppleTV, airodump-ng reported a few thousand frames from the AppleTV's real SSID, and 10k frames between the three other SSIDs.



      Why are the AppleTVs making their own network and why are they so chatty?







      appletv






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked 40 mins ago









      iAdjunctiAdjunct

      1,118614




      1,118614






















          2 Answers
          2






          active

          oldest

          votes


















          2














          They are likely packets for Airplay, since that works over an Ad-Hoc Wireless network



          Reference - https://en.wikipedia.org/wiki/AirPlay






          share|improve this answer































            1














            When I look at the packets in Wireshark, they are unencrypted and contain IPv6 multicast messages advertising airplay. They also contain data on the type of device, device capabilities, and who knows what other data.



            At the very least, it does not appear to contain the AppleID used in plain text, so there's a plus, but I can't guarantee it's not hidden/encoded somewhere else.






            share|improve this answer
























            • Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

              – CaldeiraG
              2 mins ago












            Your Answer








            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "3"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














            draft saved

            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1426854%2fappletvs-create-a-chatty-alternate-wifi-network%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            2 Answers
            2






            active

            oldest

            votes








            2 Answers
            2






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            2














            They are likely packets for Airplay, since that works over an Ad-Hoc Wireless network



            Reference - https://en.wikipedia.org/wiki/AirPlay






            share|improve this answer




























              2














              They are likely packets for Airplay, since that works over an Ad-Hoc Wireless network



              Reference - https://en.wikipedia.org/wiki/AirPlay






              share|improve this answer


























                2












                2








                2







                They are likely packets for Airplay, since that works over an Ad-Hoc Wireless network



                Reference - https://en.wikipedia.org/wiki/AirPlay






                share|improve this answer













                They are likely packets for Airplay, since that works over an Ad-Hoc Wireless network



                Reference - https://en.wikipedia.org/wiki/AirPlay







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered 33 mins ago









                LawrenceLawrence

                3,247816




                3,247816

























                    1














                    When I look at the packets in Wireshark, they are unencrypted and contain IPv6 multicast messages advertising airplay. They also contain data on the type of device, device capabilities, and who knows what other data.



                    At the very least, it does not appear to contain the AppleID used in plain text, so there's a plus, but I can't guarantee it's not hidden/encoded somewhere else.






                    share|improve this answer
























                    • Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                      – CaldeiraG
                      2 mins ago
















                    1














                    When I look at the packets in Wireshark, they are unencrypted and contain IPv6 multicast messages advertising airplay. They also contain data on the type of device, device capabilities, and who knows what other data.



                    At the very least, it does not appear to contain the AppleID used in plain text, so there's a plus, but I can't guarantee it's not hidden/encoded somewhere else.






                    share|improve this answer
























                    • Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                      – CaldeiraG
                      2 mins ago














                    1












                    1








                    1







                    When I look at the packets in Wireshark, they are unencrypted and contain IPv6 multicast messages advertising airplay. They also contain data on the type of device, device capabilities, and who knows what other data.



                    At the very least, it does not appear to contain the AppleID used in plain text, so there's a plus, but I can't guarantee it's not hidden/encoded somewhere else.






                    share|improve this answer













                    When I look at the packets in Wireshark, they are unencrypted and contain IPv6 multicast messages advertising airplay. They also contain data on the type of device, device capabilities, and who knows what other data.



                    At the very least, it does not appear to contain the AppleID used in plain text, so there's a plus, but I can't guarantee it's not hidden/encoded somewhere else.







                    share|improve this answer












                    share|improve this answer



                    share|improve this answer










                    answered 33 mins ago









                    iAdjunctiAdjunct

                    1,118614




                    1,118614













                    • Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                      – CaldeiraG
                      2 mins ago



















                    • Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                      – CaldeiraG
                      2 mins ago

















                    Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                    – CaldeiraG
                    2 mins ago





                    Please use the Post answer button only for actual answers. You should modify your original question to add additional information.

                    – CaldeiraG
                    2 mins ago


















                    draft saved

                    draft discarded




















































                    Thanks for contributing an answer to Super User!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1426854%2fappletvs-create-a-chatty-alternate-wifi-network%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Усть-Каменогорск

                    Халкинская богословская школа

                    Высокополье (Харьковская область)