Re: Tuya smart plug traffic

From Crippled Hornbill, 5 Months ago, written in Plain Text, viewed 4 times. This paste is a reply to Tuya smart plug traffic from Colossal Crocodile - view diff
URL https://paste.steamr.com/view/a837c910 Embed
Download Paste or View Raw
  1.  
  2.  
  3.  
  4.  
  5. 04:29:06.287551 IP 192.168.1.1.67 > 192.168.1.103.68: BOOTP/DHCP, Reply, length 300
  6. 04:29:10.286357 IP 192.168.1.1.67 > 192.168.1.103.68: BOOTP/DHCP, Reply, length 300
  7. 04:29:10.294216 IP 192.168.1.1.67 > 192.168.1.103.68: BOOTP/DHCP, Reply, length 300
  8. 04:29:10.296363 ARP, Request who-has 192.168.1.103 tell 0.0.0.0, length 28
  9. 04:29:10.296454 ARP, Request who-has 192.168.1.103 tell 0.0.0.0, length 28
  10. 04:29:10.769112 ARP, Request who-has 192.168.1.103 tell 0.0.0.0, length 28
  11. 04:29:10.769206 ARP, Request who-has 192.168.1.103 tell 0.0.0.0, length 28
  12. 04:29:11.268958 ARP, Request who-has 192.168.1.103 tell 192.168.1.103, length 28
  13. 04:29:11.269046 ARP, Request who-has 192.168.1.103 tell 192.168.1.103, length 28
  14. 04:29:13.573906 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  15. 04:29:13.573980 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  16. 04:29:13.574469 ARP, Request who-has 192.168.1.1 tell 192.168.1.103, length 28
  17. 04:29:13.574528 ARP, Request who-has 192.168.1.1 tell 192.168.1.103, length 28
  18. 04:29:13.574787 ARP, Reply 192.168.1.1 is-at c4:6e:1f:11:2f:9d, length 28
  19. 04:29:13.615561 IP 192.168.1.103.49153 > 192.168.1.1.53: 0+ A? mq.gw.tuyaus.com. (34)
  20. 04:29:13.618315 IP 192.168.1.1.53 > 192.168.1.103.49153: 0* 1/0/0 A 10.1.2.54 (50)
  21. 04:29:13.642678 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [S], seq 6509, win 5840, options [mss 1440], length 0
  22. 04:29:13.643927 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [S.], seq 1877495306, ack 6510, win 29200, options [mss 1460], length 0
  23. 04:29:13.661529 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 1, win 5840, length 0
  24. 04:29:13.662273 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [P.], seq 1:204, ack 1, win 5840, length 203
  25. 04:29:13.663245 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [.], ack 204, win 30016, length 0
  26. 04:29:13.663875 IP 10.1.2.54.1883 > 192.168.1.103.17327: Flags [F.], seq 2368477632, ack 6983, win 31088, length 0
  27. 04:29:13.664119 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 1:5, ack 204, win 30016, length 4
  28. 04:29:13.688400 IP 192.168.1.103.17327 > 10.1.2.54.1883: Flags [R.], seq 1, ack 1, win 5840, length 0
  29. 04:29:13.696665 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [P.], seq 204:247, ack 5, win 5836, length 43
  30. 04:29:13.697780 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 5:10, ack 247, win 30016, length 5
  31. 04:29:13.863025 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 10, win 5831, length 0
  32. 04:29:14.574395 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [P.], seq 247:462, ack 10, win 5831, length 215
  33. 04:29:14.575611 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 10:14, ack 462, win 31088, length 4
  34. 04:29:14.815097 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 10:14, ack 462, win 31088, length 4
  35. 04:29:14.818859 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 14, win 5827, length 0
  36. 04:29:14.821850 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 14, win 5827, length 0
  37. 04:29:15.351078 ARP, Request who-has 192.168.1.103 tell 192.168.1.1, length 28
  38. 04:29:15.518600 IP 192.168.1.103.49153 > 192.168.1.1.53: 0+ A? a.tuyaus.com. (30)
  39. 04:29:15.520213 IP 192.168.1.1.53 > 192.168.1.103.49153: 0* 1/0/0 A 10.1.2.54 (46)
  40. 04:29:15.526362 ARP, Reply 192.168.1.103 is-at cc:50:e3:12:31:8a, length 28
  41. 04:29:15.533338 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [S], seq 6517, win 5840, options [mss 1440], length 0
  42. 04:29:15.534486 IP 10.1.2.54.80 > 192.168.1.103.49051: Flags [S.], seq 2898722670, ack 6518, win 29200, options [mss 1460], length 0
  43. 04:29:15.560229 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [.], ack 1, win 5840, length 0
  44. 04:29:15.562725 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [P.], seq 1:260, ack 1, win 5840, length 259: HTTP: POST /gw.json?a=atop.online.debug.log&gwId=18313406cc50e312318a&t=15&sign=3ffba2615766e8a5e8153bc453d9614f HTTP/1.1
  45. 04:29:15.563674 IP 10.1.2.54.80 > 192.168.1.103.49051: Flags [.], ack 260, win 30016, length 0
  46. 04:29:15.581563 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [P.], seq 260:489, ack 1, win 5840, length 229: HTTP
  47. 04:29:15.582573 IP 10.1.2.54.80 > 192.168.1.103.49051: Flags [.], ack 489, win 31088, length 0
  48. 04:29:15.950416 IP 10.1.2.54.80 > 192.168.1.103.49051: Flags [P.], seq 1:327, ack 489, win 31088, length 326: HTTP: HTTP/1.1 200 OK
  49. 04:29:16.177185 IP 10.1.2.54.80 > 192.168.1.103.49051: Flags [P.], seq 1:327, ack 489, win 31088, length 326: HTTP: HTTP/1.1 200 OK
  50. 04:29:16.571916 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  51. 04:29:16.571996 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  52. 04:29:16.576140 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [.], ack 327, win 5514, length 0
  53. 04:29:16.578835 IP 192.168.1.103.49051 > 10.1.2.54.80: Flags [R.], seq 489, ack 327, win 5840, length 0
  54. 04:29:16.582464 IP 192.168.1.103.48471 > 10.1.2.54.80: Flags [S], seq 6529, win 5840, options [mss 1440], length 0
  55. 04:29:16.583550 IP 10.1.2.54.80 > 192.168.1.103.48471: Flags [S.], seq 1531180439, ack 6530, win 29200, options [mss 1460], length 0
  56. 04:29:16.633446 IP 192.168.1.103.48471 > 10.1.2.54.80: Flags [.], ack 1, win 5840, length 0
  57. 04:29:16.638503 IP 192.168.1.103.48471 > 10.1.2.54.80: Flags [P.], seq 1:281, ack 1, win 5840, length 280: HTTP: POST /gw.json?a=tuya.device.dynamic.config.get&gwId=18313406cc50e312318a&t=1588652955&v=1.0&sign=aa6f0029f177583d3a3b10205153bc5b HTTP/1.1
  58. 04:29:16.639538 IP 10.1.2.54.80 > 192.168.1.103.48471: Flags [.], ack 281, win 30016, length 0
  59. 04:29:16.737592 IP 10.1.2.54.80 > 192.168.1.103.48471: Flags [P.], seq 1:372, ack 281, win 30016, length 371: HTTP: HTTP/1.1 200 OK
  60. 04:29:16.746059 IP 192.168.1.103.48471 > 10.1.2.54.80: Flags [.], ack 372, win 5469, length 0
  61. 04:29:16.746485 IP 192.168.1.103.48471 > 10.1.2.54.80: Flags [R.], seq 281, ack 372, win 5840, length 0
  62. 04:29:19.574324 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  63. 04:29:19.574404 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  64. 04:29:22.580929 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  65. 04:29:22.581065 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  66. 04:29:25.571142 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  67. 04:29:25.571222 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  68. 04:29:28.589318 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  69. 04:29:28.589393 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  70. 04:29:30.513915 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [S], seq 6599, win 5840, options [mss 1440], length 0
  71. 04:29:30.515115 IP 10.1.2.54.80 > 192.168.1.103.10302: Flags [S.], seq 640819813, ack 6600, win 29200, options [mss 1460], length 0
  72. 04:29:30.543279 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [.], ack 1, win 5840, length 0
  73. 04:29:30.543744 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [P.], seq 1:282, ack 1, win 5840, length 281: HTTP: POST /gw.json?a=tuya.device.upgrade.silent.get&gwId=18313406cc50e312318a&t=1588652969&v=4.1&sign=a457bbbf86102ec491e7907377c6ac6d HTTP/1.1
  74. 04:29:30.544649 IP 10.1.2.54.80 > 192.168.1.103.10302: Flags [.], ack 282, win 30016, length 0
  75. 04:29:30.558593 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [P.], seq 282:319, ack 1, win 5840, length 37: HTTP
  76. 04:29:30.559605 IP 10.1.2.54.80 > 192.168.1.103.10302: Flags [.], ack 319, win 30016, length 0
  77. 04:29:30.711376 IP 10.1.2.54.80 > 192.168.1.103.10302: Flags [P.], seq 1:313, ack 319, win 30016, length 312: HTTP: HTTP/1.1 200 OK
  78. 04:29:30.853200 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [.], ack 313, win 5528, length 0
  79. 04:29:30.853574 IP 192.168.1.103.10302 > 10.1.2.54.80: Flags [R.], seq 319, ack 313, win 5840, length 0
  80. 04:29:31.572479 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  81. 04:29:31.572555 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  82. 04:29:34.571225 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  83. 04:29:34.571296 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  84. 04:29:37.573182 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  85. 04:29:37.573255 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  86. 04:29:40.575416 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  87. 04:29:40.575490 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  88. 04:29:43.566963 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  89. 04:29:43.567038 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  90. 04:29:46.578120 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  91. 04:29:46.578200 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  92. 04:29:49.579219 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  93. 04:29:49.579286 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  94. 04:29:52.571364 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  95. 04:29:52.571440 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  96. 04:29:55.571383 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  97. 04:29:55.571464 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  98. 04:29:58.571701 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  99. 04:29:58.571807 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  100. 04:30:01.580320 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  101. 04:30:01.580391 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  102. 04:30:04.571449 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  103. 04:30:04.571568 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  104. 04:30:07.568208 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  105. 04:30:07.568291 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  106. 04:30:10.571273 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  107. 04:30:10.571394 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  108. 04:30:13.588162 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  109. 04:30:13.588240 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  110. 04:30:13.770409 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [P.], seq 462:464, ack 14, win 5827, length 2
  111. 04:30:13.771521 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 14:16, ack 464, win 31088, length 2
  112. 04:30:13.788027 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 16, win 5825, length 0
  113. 04:30:16.571475 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  114. 04:30:16.571564 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  115. 04:30:18.791626 ARP, Request who-has 192.168.1.103 tell 192.168.1.1, length 28
  116. 04:30:19.578327 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  117. 04:30:19.578460 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  118. 04:30:19.578989 ARP, Reply 192.168.1.103 is-at cc:50:e3:12:31:8a, length 28
  119. 04:30:22.572983 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  120. 04:30:22.573066 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  121. 04:30:25.571605 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  122. 04:30:25.571685 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  123. 04:30:28.569251 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  124. 04:30:28.569326 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  125. 04:30:31.574990 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  126. 04:30:31.575073 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  127. 04:30:34.571407 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  128. 04:30:34.571485 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  129. 04:30:37.574177 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  130. 04:30:37.574259 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  131. 04:30:40.572180 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  132. 04:30:40.572264 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  133. 04:30:43.584565 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  134. 04:30:43.584646 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  135. 04:30:46.571667 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  136. 04:30:46.571757 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  137. 04:30:49.574492 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  138. 04:30:49.574578 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  139. 04:30:52.571882 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  140. 04:30:52.571967 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  141. 04:30:55.578287 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  142. 04:30:55.578366 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  143. 04:30:58.571703 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  144. 04:30:58.571781 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  145. 04:31:01.574144 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  146. 04:31:01.574229 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  147. 04:31:04.571783 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  148. 04:31:04.571872 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  149. 04:31:07.572065 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  150. 04:31:07.572147 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  151. 04:31:10.567248 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  152. 04:31:10.567334 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  153. 04:31:13.583112 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  154. 04:31:13.583182 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  155. 04:31:13.770393 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [P.], seq 464:466, ack 16, win 5825, length 2
  156. 04:31:13.771570 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 16:18, ack 466, win 31088, length 2
  157. 04:31:14.008235 IP 10.1.2.54.1883 > 192.168.1.103.4573: Flags [P.], seq 16:18, ack 466, win 31088, length 2
  158. 04:31:14.009080 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 18, win 5823, length 0
  159. 04:31:14.027909 IP 192.168.1.103.4573 > 10.1.2.54.1883: Flags [.], ack 18, win 5823, length 0
  160. 04:31:16.574122 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  161. 04:31:16.574208 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  162. 04:31:18.791408 ARP, Request who-has 192.168.1.103 tell 192.168.1.1, length 28
  163. 04:31:19.572157 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  164. 04:31:19.572236 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  165. 04:31:19.576911 ARP, Reply 192.168.1.103 is-at cc:50:e3:12:31:8a, length 28
  166. 04:31:22.572028 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  167. 04:31:22.572111 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  168. 04:31:25.575152 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  169. 04:31:25.575234 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  170. 04:31:28.571493 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  171. 04:31:28.571569 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  172. 04:31:31.571562 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  173. 04:31:31.571646 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  174. 04:31:34.572310 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  175. 04:31:34.572393 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  176. 04:31:37.567234 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  177. 04:31:37.567314 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  178. 04:31:40.576269 IP 192.168.1.103.49154 > 255.255.255.255.6666: UDP, length 175
  179.  

Replies to Re: Tuya smart plug traffic rss

Title Name Language When
Re: Re: Tuya smart plug web traffic Walloping Earthworm text 5 Months ago.

Reply to "Re: Tuya smart plug traffic"

Here you can reply to the paste above