Hosts with Active Connections 10.85.0.1

[pmerrill]

I needed to execute a tracert just now and noticed the following output.

1 1 ms 1 ms 1 ms 192.168.1.1
2 18 ms 9 ms 18 ms 10.85.0.1

I expect the 192.168.1.1 but the 10.85.0.1 throws me? Is there some process that runs in the router that has an internal IP address? Maybe the QoS Service?

It is also listed as a host with an active connection on the Connected Hosts page with an unknown hostname and an unknown host MAC.

Can someone confirm this is what should be happening?

[mix]

Post the output of the full traceroute to this thread.

[pmerrill]

I think I may know the problem, I will check tonight. I have connected to my company's VPN from home and I think that the address is the address of the VPN access point.

I'm not sure why though it's persisting after I've disconnected. Perhaps I need to officially logout rather than just shutdown. I'll give it a go tonight and report back.

[pmerrill]

Still havn't figured it out. Current connections show below. Here's a tracert from my PC to www.google.com.

>tracert www.google.com

Tracing route to www.l.google.com [74.125.237.115]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms Gargoyle.lan [192.168.1.1]
2 95 ms 75 ms 116 ms 10.85.0.1
3 51 ms 19 ms 38 ms sbr4-ge2-1-7.gw.optusnet.com.au [198.142.160.49]

4 38 ms 13 ms 58 ms xe-3-1-0.sd31.optus.net.au [119.225.41.253]
5 * * * Request timed out.
6 29 ms 16 ms 48 ms google.sd13.optus.net.au [119.225.36.2]
7 17 ms 62 ms 15 ms 66.249.95.232
8 24 ms 59 ms 11 ms 72.14.237.135
9 43 ms 80 ms 29 ms syd01s12-in-f19.1e100.net [74.125.237.115]

Trace complete.

I'm using OpenDNS as my DNS, don't know if that has anything to do with it or not.

Since Port 67 has to do with DHCP, perhaps it has something to do with the way the DHCP service works in OpenWRT???

[pbix]

Looks like your ISP gateway and the connection looks like your DHCP connection to your ISP. Are you using DHCP for your WAN connection type?

Look at your status screen under WAN. What is the gateway?

[mix]

Yeah, 10.85.0.1 is on your isp's internal network. Plenty of isp's use private ip addresses for their internal network, even mine:

Tracing route to http://www.l.google.com [74.125.113.106]
over a maximum of 30 hops:

1 3 ms 2 ms 2 ms Gargoyle.lan [192.168.3.1]
2 * * * Request timed out.
3 12 ms 12 ms 12 ms 10.15.25.126
4 12 ms 12 ms 13 ms 10.15.8.49
5 55 ms 28 ms 28 ms core1-0-0-8.lga.net.google.com [198.32.118.39]
6 26 ms 28 ms 28 ms 209.85.248.180
7 29 ms 36 ms 26 ms 209.85.251.88
8 62 ms 53 ms 32 ms 72.14.239.93
9 46 ms 44 ms 44 ms 209.85.241.222
10 46 ms 44 ms 43 ms 64.233.174.87
11 * 54 ms * 216.239.47.250
12 45 ms 44 ms 44 ms vw-in-f106.1e100.net [74.125.113.106]

Trace complete.

[jFlash]

Hi,

I have noticed that some virtual machines will install a virtual adapter vbox and vmware in particular. Do you have these installed on any machine on your network?

jFlash

[pmerrill]

Hi,

I have noticed that some virtual machines will install a virtual adapter vbox and vmware in particular. Do you have these installed on any machine on your network?

jFlash

Nope. The major devices I have installed are:
Minitar VoIP box MVA-11A
2 Squeezebox Booms (Logitech)
couple printers, one wired, one wireless
1 Synology 110j NAS
various iphone/Android
1 TP-Link SF1005D 5 port switch