Am 06.08.26 um 05:50 schrieb Daryl Morse:
The destination address belongs to my probe.
I can properly ping your probe and did successful measurements with it. Seems your probe and your network are not the issue.
For a while I wondered what caused the "5" in the fe80:5::* link-local address, but apparently, FreeBSD, on which pfSense is based, inserts it to denote that the link-local address is associated with the WAN interface.
Is it assigned to it? Can you see it via netstat -in in FreeBSD/pfsense?
You can see that the messages are periodic, occurring every 4 seconds. The addresses are not random. They repeat. I presume that the multiple addresses indicate multiple measurements associated with my probe. I connected Wireshark to the WAN interface and verified the packets are present, but without the "5". The problem is not that pfSense is logging these messages. It's behaving properly. I'm wondering why the messages have a link-local source address. The only explanation is that the ISP router is converting routable GUA addresses to non-routable link-local addresses, otherwise, the packets could not have been routed to my probe. Since these packets are arriving at my router, this conversion must be happening in the ISP router at the other end of the fibre.
Technically, routing uses the destination address, so such packages can be delivered to you. Some ISPs and IXPs may filter them out, some may not (such checks need some CPU cycles).
Certain operating systems refuse to route them, as the RFC disallows that.I've also seen packets with ULA as src and also NDP targeted to my public addresses from far away.
I'm wondering if there is any way to get a log of the measurements being run against my probe. If I could see that the messages in my log correspond to measurements against my probe, I could provide that information to my ISP to diagnose the cause.
https://atlas.ripe.net/measurements/public?sort=-id&id__gt=1000000¤t_probes=52209&toggle=all&page_size=100&page=1 -- Gruß Marco Junk-Mail bitte an [email protected]
OpenPGP_signature.asc
Description: OpenPGP digital signature
----- To unsubscribe from this mailing list or change your subscription options, please visit: https://mailman.ripe.net/mailman3/lists/ripe-atlas.ripe.net/ As we have migrated to Mailman 3, you will need to create an account with the email matching your subscription before you can change your settings. More details at: https://www.ripe.net/membership/mail/mailman-3-migration/
