Home / server / Questions / 582065
Accepted
user3297416
Asked: 2014-03-15 03:27:33 +0800 CST

ISP broadcasting all IP-packets, so I can see traffic of other clients from ISP

  • 772

Recently I wondered why my router shows a constant downstream of 5 MBit/s, while I am downloading almost no data. I discovered the "packet logging" function of my router, with which I was able to log all the traffic in the wireshark format. And I recognized that 80% of the downstream traffic was not for my IP address, so it just gets discarded (probably). When tapping the "internet interface" of my router, I could see the downstream packets of IP-adresses that is not mine: Mail addresses from other people, DNS query responses from other people, http-responses from other people...

My question: The fact that I can see other people's downstream, is this normal or is it a misconfiguration on the side of the ISP?

I doubt that it's normal, because this causes a lot of unnecessary traffic, which is bad for me, bad for the ISP and also a data privacy issue for everyone.

wireshark

3 Answers

  1. No, this is not normal. Contact your provider to resolve this issue. When they can't, switch away ASAP.

    • 33
  2. Best Answer

    It has been a while since I consulted to the telecom industry so I am going off of what is still likely.

    For DSL, this is sub-par. You should never see traffic destined for another IP address. I would check with your provider. This is not a standard configuration and it is likely that there are some settings in the RedBack that are not right. Each connection should be segmented and the bandwidth you are paying for by contract is being wasted. DSL connections are frame connections when you whittle through all of the protocols. This means that your frame connection must only see the traffic for your segment.

    For Cable, this is normal. Cable is segmented by neighborhoods depending upon area saturation. A neighborhood could be many miles or one block. This is normal since cable is not a frame connection but based upon broadcast standards much like ethernet over thin-net/thick-net back in the day. Your cable router may or may not enforce network segmentation depending upon the router, either by age or by model. Cable connections almost always see traffic on the WAN side that is not intended for the LAN. But sometimes WAN traffic can be seen on the LAN side. This is not unusual even today with the larger carriers.

    • 14

  3. If it's cable, by definition it's shared circuit. Seeing other people's downstream under global logging of all packets would be normal.

    Promisc mode cable gear would be an interesting anomaly but that sounds like exactly what is happening.

    • 4