WIFI 设置问题，不主动传输数据时仍然会有 100-200kb 下行

[harbour]

最近连公寓的 WIFI 之后无论什么设备（手机，mac ，台式）都会在没有任何数据传输的情况下不断的接收 100-200kb/s 的数据，导致手机电池耗电飞快，一个晚上能跑 1 个 g 的下行流量，应该是我这楼层公寓路由器的问题。链接 reception 和部分楼层的情况下是正常的，链接学校 WIFI 也是正常的，并不会无故接收。 请问这个样子是因为什么原因呢？是因为公寓路由器设置有问题吗？基本上都显示流量经过 mDNSresponder （ mac ）和 MulticastDNSResponder （ android ）.

[Zy143L]

抓包看看情况咯
可能局域网有不停的探测

[harbour]

@Zy143L 下了个 proxyman ，啥都看不出来啊，全是正常的链接，有什么抓包软件能知道到底是在发送什么来吗

[albert91]

抓包，屏蔽呗
可以自己用个路由当二级路由，桥接公寓 wifi ，ap-centre 模式

[iceheart]

pc 上 wireshark 抓包

[wanwaneryide]

路由器还能控制手机收发数据？我能想到的就是路由器太拉，手机反反复复重传数据啥的，但是你有没说网络有问题，就想不通了

[maybeonly]

有人在发组播/广播玩儿？
疯狂扫 arp 之类的
不行就套个二级路由吧

[zmcity]

看上去像设备太多了，ARP/DHCP 风暴。

[Zy143L]

@harbour 这得用 wireshark 抓

[harbour]

@wanwaneryide 网络是没问题的，很稳定，在部分楼层和另一栋楼是不会有这样莫名其妙的下行数据，很奇怪

[harbour]

@Zy143L 谢谢，我试试看

[harbour]

@maybeonly
@zmcity
这里是部分的抓，请问能看出来什么吗
1 0.000000 10.93.7.144 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
2 0.000001 10.93.7.144 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
3 0.000354 0a:1f:b1:95:98:e6 Apple_b7:24:a0 LLC 137 S P, func=RNR, N(R)=64; DSAP NULL LSAP Individual, SSAP NULL LSAP Command
4 0.000355 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
5 0.000355 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
6 0.001838 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
7 0.001839 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
8 0.001839 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
9 0.001839 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
10 0.001840 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
11 0.001840 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
12 0.001840 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
13 0.001840 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
14 0.001841 10.93.11.213 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
15 0.001841 10.93.7.123 224.0.0.251 MDNS 570 Standard query response 0x0000 TXT PTR Keighra’s iPad._rdlink._tcp.local TXT, cache flush PTR Keighra’s iPad._companion-link._tcp.local TXT, cache flush SRV, cache flush 0 0 49153 Keighras-iPad.local AAAA, cache flush fe80::1815:879c:3f0a:20a6 A, cache flush 10.93.7.123 SRV, cache flush 0 0 53994 Keighras-iPad.local NSEC, cache flush Keighra’s iPad._rdlink._tcp.local NSEC, cache flush Keighras-iPad.local NSEC, cache flush Keighra’s iPad._companion-link._tcp.local
16 0.001842 10.93.15.18 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
17 0.001842 10.93.0.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QU" question
18 0.002002 10.93.0.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QU" question
19 0.002002 10.93.15.18 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
20 0.003487 10.93.7.144 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
21 0.003487 10.93.4.13 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
22 0.003487 10.93.7.97 224.0.0.251 MDNS 86 Standard query response 0x0000 A, cache flush 10.93.7.97
23 0.003488 10.93.19.147 224.0.0.251 MDNS 88 Standard query response 0x0000 A, cache flush 10.93.19.147
24 0.003488 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
25 0.003488 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
26 0.003488 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
27 0.003489 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
28 0.003489 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
29 0.003489 10.93.6.200 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
30 0.003489 10.93.11.79 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31 0.003490 10.93.11.79 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
32 0.005491 IntelCor_d2:aa:69 Apple_b7:24:a0 ARP 56 Who has 10.93.19.193? Tell 10.93.17.168
33 0.005491 10.93.14.146 224.0.0.251 MDNS 88 Standard query response 0x0000 A, cache flush 10.93.14.146
34 0.005493 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
35 0.005494 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
36 0.005494 10.93.11.249 224.0.0.251 MDNS 88 Standard query response 0x0000 A, cache flush 10.93.11.249
37 0.005494 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
38 0.005494 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
39 0.005495 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
40 0.005495 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
41 0.005495 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
42 0.005496 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
43 0.005496 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
44 0.005496 10.93.4.228 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question

[harbour]

@zmcity
@maybeonly

这也是一部分
31053 3.533768 Microsof_31:5b:2f Apple_b7:24:a0 ARP 56 Who has 10.93.8.102? Tell 10.93.16.68
31054 3.533768 10.93.11.213 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31055 3.533769 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31056 3.533769 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31057 3.533769 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31058 3.533770 10.93.5.116 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31059 3.533770 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31060 3.533770 10.93.5.116 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31061 3.533770 10.93.4.228 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31062 3.533771 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31063 3.533771 10.93.11.213 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31064 3.533771 10.93.12.173 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31065 3.533772 10.93.4.228 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31066 3.533772 10.93.4.228 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31067 3.534233 10.93.4.13 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31068 3.534233 10.93.12.173 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31069 3.535774 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31070 3.535774 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31071 3.535775 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31072 3.535775 10.93.9.254 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31073 3.535775 10.93.17.80 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31074 3.535775 10.93.8.97 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31075 3.535776 c6:ed:2f:5e:43:5b Apple_b7:24:a0 ARP 56 Who has 10.93.13.206? Tell 10.93.1.154
31076 3.535796 10.93.4.13 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31077 3.535796 10.93.21.229 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31078 3.536186 10.93.4.16 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31079 3.536187 10.93.4.16 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31080 3.536659 10.93.4.16 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31081 3.536659 10.93.4.16 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31082 3.536660 10.93.4.16 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31083 3.538889 10.93.21.229 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31084 3.538890 10.93.21.229 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31085 3.538890 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31086 3.538890 10.93.21.229 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31087 3.538891 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31088 3.538891 10.93.18.136 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31089 3.538891 ce:59:c7:0e:cc:63 Apple_b7:24:a0 ARP 56 Who has 10.93.12.113? Tell 10.93.21.143
31090 3.538891 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.20.67? Tell 10.93.9.135
31091 3.538892 12:a6:38:a2:32:85 Apple_b7:24:a0 ARP 56 Who has 10.93.13.204? Tell 10.93.5.14
31092 3.538892 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.12.142? Tell 10.93.9.135
31093 3.540458 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.2.231? Tell 10.93.9.135
31094 3.540459 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.21.143? Tell 10.93.9.135
31095 3.540459 10.93.6.200 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31096 3.540460 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.20.92? Tell 10.93.9.135
31097 3.540460 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.10.75? Tell 10.93.9.135
31098 3.540460 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.8.203? Tell 10.93.9.135
31099 3.540460 10.93.4.13 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
31100 3.540461 Microsof_71:d4:07 Apple_b7:24:a0 ARP 56 Who has 10.93.8.102? Tell 10.93.9.135
31101 3.540461 10.93.7.9 239.255.255.250 SSDP 167 M-SEARCH * HTTP/1.1
19508 4.020489 10.93.4.228 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
19509 4.021418 10.93.7.144 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
19510 4.023147 AmazonTe_b0:23:d3 Apple_b7:24:a0 ARP 56 Who has 10.93.6.32? Tell 10.93.8.29
19511 4.023147 AmazonTe_5f:ca:59 Apple_b7:24:a0 ARP 56 Who has 10.93.5.54? Tell 10.93.8.168
19512 4.024282 12:3f:46:9c:89:f8 Apple_b7:24:a0 ARP 56 Who has 10.93.24.240? Tell 10.93.8.163
19513 4.025558 AmazonTe_2d:b6:a1 Apple_b7:24:a0 ARP 56 Who has 10.93.7.169? Tell 10.93.11.143
19514 4.025559 AmazonTe_2d:b6:a1 Apple_b7:24:a0 ARP 56 Who has 10.93.24.90? Tell 10.93.11.143
19515 4.027119 10.93.11.79 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
19516 4.027950 10.93.11.79 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
19517 4.028021 AmazonTe_1a:5a:d5 Apple_b7:24:a0 ARP 56 Who has 10.93.22.203? Tell 10.93.18.136
19518 4.028830 AmazonTe_50:5a:6b Apple_b7:24:a0 ARP 56 Who has 10.93.12.57? Tell 10.93.15.26
19519 4.028830 AmazonTe_2a:34:e6 Apple_b7:24:a0 ARP 56 Who has 10.93.24.90? Tell 10.93.8.175
19520 4.031189 5e:25:bd:47:c2:d2 Apple_b7:24:a0 ARP 56 Who has 10.93.6.32? Tell 10.93.9.45
19521 4.031623 10.93.10.222 224.0.0.251 MDNS 348 Standard query response 0x0000 TXT PTR HUAWEI Matepad 11._rdlink._tcp.local TXT, cache flush SRV, cache flush 0 0 49157 HUAWEI-Matepad-11.local AAAA, cache flush fe80::c6d:d1ba:b031:3e92 A, cache flush 10.93.10.222 NSEC, cache flush HUAWEI Matepad 11._rdlink._tcp.local NSEC, cache flush HUAWEI-Matepad-11.local
19522 4.031914 Microsof_7b:cc:db Apple_b7:24:a0 ARP 56 Who has 10.93.22.95? Tell 10.93.6.163
19523 4.032192 AmazonTe_12:20:58 Apple_b7:24:a0 ARP 56 Who has 10.93.22.203? Tell 10.93.2.179
19524 4.032642 10.93.19.9 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
19525 4.032643 10.93.11.213 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
19526 4.033170 10.93.5.116 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question
19527 4.033427 AmazonTe_1d:e1:fc Apple_b7:24:a0 ARP 56 Who has 10.93.14.231? Tell 10.93.12.116
19528 4.033776 10.93.21.229 224.0.0.251 MDNS 78 Standard query 0x0000 AAAA A36A26FFA297.local, "QM" question

[harbour]

@albert91 准备上个路由器，带了，但是英航把我行李弄丢了，还在找回

[harbour]

@zmcity
@maybeonly
抱歉字有点多，这里是图片

[strp]

mDNS 是 Windows SB 可以关
https://superuser.com/questions/1588938/does-smart-multi-homed-name-resolution-smhnr-exist-in-windows-10-home

macOS 我没用过 但是看起来好像需要关闭 SIP 才能禁用，这就有点。。
https://apple.stackexchange.com/questions/344163/how-to-or-is-that-possible-to-stop-mdnsresponder-without-disable-system-integrit

ARP 感觉应该不怎么吃流量 但是如果一直发那也不是没可能
你标记一下 SamsungE_xxxxx 和 AmazonTe_xxxxxx 那些设备到底是什么，如果觉得有必要并且有条件，可以新建一个访客隔离的 WiFi 给那些设备用，防止它们一直发 ARP 。

[harbour]

@strp 谢谢建议，但是这是公寓的网我动不了，这些是公寓其他用户的设备，有一些国人的设备可以直接看到汉字名字。已经跟公寓报告了，他们说会报告上去，我慢慢等吧。再次感谢你的建议🙏

[zmcity]

看起来确实是网段太大导致的，你的 arp 包看起来收了 10.93.0.0/16 的包，正常一个网段不应该超过 /24 ，超过的话广播包就是这样的，这个问题在你的这个场景下只能找管理方解决。

[harbour]

@zmcity #17 谢谢解释，10.93.0.0/16 的包请问具体是什么意思呢，是应该接受 10.93 下 255/16 这么多设备的包吗，如果能搞清楚的话我就可以在反馈邮件直接跟他们说明一下，再次感谢。