Siara Systems leaking CPE’s MAC addresses?

After a DSL/network outage, I launched a tcpdump on the ethernet interface to see if pppd was renegotiating the PPPoE session, and I saw all these LCP Term-Request frames that seems to come from other customers’ equipments (given the various source MAC addresses) and destined to a Siara Systems equipment (which I guess is a DSLAM, or core router, on which all these equipments are connected).

Is this an expected behavior to receive all these LCP Term-Request frames?

Here is a sample of unique/sorted frames captured during the DSL/network outage:

01:43:37.783709 00:78:9e:58:bb:b8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x117f] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:00.863773 00:78:9e:5f:2c:c8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x45d6] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:39.891787 00:78:9e:62:da:78 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x466a] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:37.916040 02:1f:9f:bf:ed:8e > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x183] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:06.737300 02:1f:9f:f5:55:dc > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x3072] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:13.254152 02:1f:9f:f6:58:58 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0xcda] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:56.829946 02:1f:9f:f7:1e:18 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x318b] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:25.805421 02:1f:9f:fb:ee:d8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x58f6] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:00.106659 02:26:44:f3:e1:e8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x9dc] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:03.889851 02:26:44:fb:96:b6 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x4f4] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:40.239677 06:1f:9f:76:cb:46 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x3b2] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:41.989293 06:1f:9f:ae:53:8a > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x222c] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:29.578837 06:1f:9f:bc:87:b0 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x2a27] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:06.628401 06:1f:9f:bd:2c:ec > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x2c6c] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:28.535989 06:1f:9f:be:ad:d8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x1630] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:45:18.006246 06:1f:9f:be:e2:a0 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x977] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:42.814223 06:1f:9f:e4:2e:4e > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x2a61] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:51.234332 06:1f:9f:e4:bb:1c > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x14a] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:46:43.938962 06:1f:9f:e5:cb:06 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x370c] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:37.687214 06:1f:9f:e7:37:28 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x1c23] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:32.994073 06:1f:9f:e8:f7:7e > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x5dc] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:32.055133 06:1f:9f:ee:41:8c > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x419c] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:16.665614 06:1f:9f:ee:ed:4e > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x18b9] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:20.254643 06:1f:9f:ef:c4:9e > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x2ab8] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:28.524629 06:1f:9f:f5:68:32 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x5140] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:39.691801 06:1f:9f:f5:fc:50 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x3ce] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:35.117619 06:1f:9f:f7:db:40 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x328d] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:02.623188 06:1f:9f:fb:c3:4e > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x168a] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:17.612460 06:1f:9f:fc:a6:3c > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x341f] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:08.671161 06:26:44:fb:79:be > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x1c41] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:39.495849 64:7c:34:09:12:ec > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x181b] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:59.234144 64:7c:34:0b:32:2c > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x3a3a] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:27.681307 64:7c:34:0b:48:dc > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x28bb] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:09.627908 c0:ac:54:08:85:c8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x11db] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:13.616575 c0:ac:54:1a:83:28 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x212c] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:45:40.047519 c0:ac:54:20:63:08 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x3e8d] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:00.905181 c0:ac:54:2f:6d:88 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x2a40] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:39.535502 c0:ac:54:30:92:c8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0xfc8] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:14.407724 c0:ac:54:33:af:58 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x257b] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:04.088399 c0:ac:54:34:36:48 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x3a79] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:39.085678 c0:ac:54:34:72:b8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0xad0] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:02.626880 c0:ac:54:3c:8f:48 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x2729] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:58.963436 d8:6c:e9:87:76:58 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x3887] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:30.327478 d8:6c:e9:91:a3:88 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x2894] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:31.337368 d8:6c:e9:92:ef:58 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x199] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:37.486142 d8:6c:e9:97:9a:b8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x1b70] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:49.567312 d8:6c:e9:9b:cf:88 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x1ef2] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:39.897440 d8:6c:e9:a1:95:48 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x2269] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:49.382321 d8:6c:e9:a5:6b:d8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x2b38] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:44:18.604134 e8:f1:b0:d9:88:98 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0xd00] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:45:37.624051 e8:f1:b0:e9:c4:e8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x1973] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:28.137089 e8:f1:b0:ea:65:e8 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x1caa] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:34.298698 e8:f1:b0:f0:62:08 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x5006] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
01:43:56.281793 e8:f1:b0:f8:7c:38 > 00:30:88:19:df:fe, ethertype PPPoE S (0x8864), length 60: PPPoE  [ses 0x2f5f] LCP (0xc021), length 31: LCP, Term-Request (0x05), id 1, length 31
Ce contenu a été publié dans Uncategorized. Vous pouvez le mettre en favoris avec ce permalien.

2 réponses à Siara Systems leaking CPE’s MAC addresses?

  1. mister anderson dit :

    No. it is not expected behavior of broadband remote access server (BRAS).

    You should only see your requests and the responses destinated your CPE.

    It must be some kind of bug or misconfiguration, as BRAS (aka Service Selection Gateway) has features to forward PPP/LCP traffics.

  2. mister anderson dit :

    Siara Systems equipment is SmartEdge platform = Multi-Service Edge Router (MSER) which handles PPPoE.

    For more information:
    https://en.wikipedia.org/wiki/Redback_Networks
    http://www.ericsson.com/ourportfolio/products/se-family

Laisser un commentaire

Votre adresse de messagerie ne sera pas publiée. Les champs obligatoires sont indiqués avec *

*