[dave4444]

No.

Your forum wont let me post a pcap file, so I’ve resorted to taking a screenshot in wireshark of the boot sequence:

Attachments:

1. 

   boot_sequence1.png
   

2. 

   boot_sequence2.png
   

[dave4444]

HTTP request (location removed):

GET /weather129.py?loc=xx.xxxxx,-xx.xxxxx&key=&fwv=217&wto=”h”:50,”t”:100,”r”:100,”bh”:30,”bt”:70,”br”:0 HTTP/1.0
Host: *
Accept: text/html

HTTP response:

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Wed, 12 Jun 2019 14:20:53 GMT
ETag: W/”68-/vS12hYKPzkncby4vbbW5fqfLcY”
Server: nginx/1.14.1
X-Powered-By: Express
Content-Length: 104
X-Cache: MISS from archer
X-Cache-Lookup: MISS from archer:3128
Via: 1.1 archer (squid/3.5.23)
Connection: close

&scale=57&rd=-1&tz=32&sunrise=309&sunset=1225&eip=168433699&rawData={“h”:59.25,”p”:0,”t”:63,”raining”:0}

[dave4444]

Yes, the device is firewalled, however everything it needs is allowed.

I’ve attached a packet capture showing the entire boot sequence.

Packet capture looks good: DHCP, ARP, NTP, then DNS for weather.opensprinkler.com and a HTTP GET for http://weather.opensprinkler.com/weather129.py

HTTP response has data.

[dave4444]

Diag shows no succesful call, however it is showing temp/precip and is updating every hour just fine.

Packet capture shows a succeful get from weather.opensprinkler.com every hour (I have obfuscated my location in dump below to XX.XXXXX):

08:09:32.679263 IP 10.10.24.35.57438 > 10.10.10.11.53: 11102+ A? weather.opensprinkler.com. (43)
08:09:32.917722 IP 10.10.10.11.53 > 10.10.24.35.57438: 11102 3/13/7 CNAME os-weather.uqyefyn54x.us-west-2.elasticbeanstalk.com., A 35.166.80.149, A 54.148.225.19 (510)
08:09:32.930924 IP 10.10.24.35.3039 > 35.166.80.149.80: Flags [S], seq 0, win 768, options [mss 550], length 0
08:09:32.942999 IP 35.166.80.149.80 > 10.10.24.35.3039: Flags [S.], seq 1484558194, ack 1, win 27600, options [mss 1380], length 0
08:09:32.945217 IP 10.10.24.35.3039 > 35.166.80.149.80: Flags [.], ack 1, win 1024, length 0
08:09:32.946624 IP 10.10.24.35.3039 > 35.166.80.149.80: Flags [P.], seq 1:146, ack 1, win 1024, length 145: HTTP: GET /weather129.py?loc=XX.XXXXX,-XX.XXXXX&key=&fwv=217&wto=”h”:50,”t”:100,”r”:100,”bh”:30,”bt”:70,”br”:0 HTTP/1.0
08:09:32.957898 IP 35.166.80.149.80 > 10.10.24.35.3039: Flags [.], ack 146, win 28160, length 0
08:09:33.505364 IP 35.166.80.149.80 > 10.10.24.35.3039: Flags [P.], seq 1:322, ack 146, win 28160, length 321: HTTP: HTTP/1.1 200 OK
08:09:33.505853 IP 35.166.80.149.80 > 10.10.24.35.3039: Flags [P.], seq 322:427, ack 146, win 28160, length 105: HTTP
08:09:33.506305 IP 35.166.80.149.80 > 10.10.24.35.3039: Flags [F.], seq 427, ack 146, win 28160, length 0
08:09:33.508324 IP 10.10.24.35.3039 > 35.166.80.149.80: Flags [FP.], seq 146, ack 322, win 1024, length 0
08:09:33.511047 IP 10.10.24.35.3039 > 35.166.80.149.80: Flags [.], ack 427, win 1024, length 0
08:09:33.513409 IP 10.10.24.35.3039 > 35.166.80.149.80: Flags [FP.], seq 146, ack 428, win 1024, length 0
08:09:33.520245 IP 35.166.80.149.80 > 10.10.24.35.3039: Flags [.], ack 147, win 28160, length 0
08:09:33.522503 IP 35.166.80.149.80 > 10.10.24.35.3039: Flags [.], ack 147, win 28160, length 0

Attachments:

1. 

   cap205.png
   

[Author]

Posts