3 ms·
That looks like a snapshot from the UniFi Network manager. Based on my experiences with UniFi gear, which I like and am running right now, I’d take any of thei
by kogir 6y ago
That looks like a snapshot from the UniFi Network manager.
Based on my experiences with UniFi gear, which I like and am running right now, I’d take any of their DPI and threat detection stuff with a full meter cube of salt. It doesn’t even report local network flows and traffic statistics correctly.
- PragmaticPulp 6y agoThe screenshot also shows fitbit, omegele, and even IMAP4 traffic. My first guess would be that the Nest thermostat is now occupying an IP address that was formerly assigned to other devices. Now that the Nest thermostat is at that address, the old packets are mistakenly attributed to the Nest thermostat.
- xyzzy_plugh 6y agoIt's more likely to be a CDN shared by multiple corps.
- kogir 6y agoYou’d hope they’d use MAC address instead of IP, but I fear you may well be right.
- brokensegue 6y agoyou only know the IP not the MAC of the server you are communicating with over the internet.
- ponker 6y agoThis is about local MAC not remote MAC
- dijit 6y ago> It doesn’t even report local network flows and traffic statistics correctly. For this _specific_ thing, I know why that is: when it comes to pure switching there's an ASIC that the OS can't read the memory of. How it works is that the OS will compile down a vlan/port configuration and then pass it to the ASIC, after that the ASIC basically works autonomously and can't introspect packets in flight. I discovered this for myself when I was trying to do some basic packet capture using one of their edgerouter-X's (which run linux). -- Ended up needing to use a laptop with a bridged network because it was impossible. :(
- kogir 6y agoI feel they should either disable this and actually route and account for all the traffic (using more capable hardware if required), or not use real units implying some number of bits. The pfSense router in front of it has no trouble handling gigabit line rate while actually tracking it, and was cheaper.
- dijit 6y agoReally? I have a pfsense firewall and it struggles with gigabit over just one route (80% efficacy), I cant imagine it faring better if it had 5 or 8 gigabit streams at once like the ER-X or ER-lite.
- kogir 6y agoI've always run mine on multi-core x64 SoCs and performance has been as expected. I won't touch their ARM offerings because everything I've seen has been woefully underpowered.
- c0nsumer 6y agoHear hear. UniFi's DPI is garbage. Look at this screenshot of it for my Synology DS1019+ NAS: https://imgur.com/a/DfPWOTB https://imgur.com/a/DfPWOTB 361GB to Let's Encrypt? Uhm... No... That about correlates with the amount I've shipped off to Backblaze from it. I don't even have Let's Encrypt doing anything on it, as it's fairly firewalled off from the rest of the world and thus can't pass the cert installation checks. The UniFi DPI is worse than useless; it's misleading. Hell, you can't even see the time period those counters are for. It provides nothing actionable.