Today I see some interesting things under the TCP protocol. They’re marked as [TCP Retransmission]. Source is 2600:1000:b150:3c0:redacted, destination is 2001:470:1f06:redacted.
To answer your question from yesterday, the ICMPv6 stuff that I see is coming from a couple of Amcrest cameras, and they say “Router Solicitation from xx:xx:xx:mac address”.










Interesting re: Hurricane Electric. I removed that config a long time ago, but the Hurricane Electric site still has the tunnel set up so maybe it pings from time to time.
My WAN port isn’t part of the bridge, I just did that temporarily as an experiment but it’s back to normal now.
That makes sense about filtering – I didn’t notice that tab before in the Packet Sniffer!
I think there’s a little bit of action when I hit “renew” on the IPv6 DHCP Client. I tried with “User Peer DNS” checked and unchecked but I couldn’t pick out a difference. Anything in the below list that sticks out?
wireshark