Acurite Access Packet exchange with Acuite Server Example

  • 1
  • Idea
  • Updated 3 months ago
People wanted to know how the Acurite system works.  I've captured this series of packet exchanges for your perusal.  You might find it useful.

10.0.1.1 is my apple router
10.0.1.39 is the DHCP address configured on the Access

I have a hangup with all the ARP packets, but that's my hangup.  It doesn't really seem to hurt anything although because they are broadcast, if your network is bridged and is not properly configure or is not running a spanning-tree (which would be unusual for home use) this can lead to broadcast storms.

The Access opens a TCP connection with Akamai (which in turn fronts for Acurite) then sends an HTML GET request with the data containing the Wx monitoring information from my 5N1.
I assume I missed the poll from Akamai for the first sequence, but it does show up in the later sequences.

The second sequence shows the Access sending a DNS request through the router for wunderground.com.edgekey.net, this is repeated only one second later in the third sequence returning the Akamai address.

I only saw data for my 5N1 sensor over this brief period.  Looking at the Access web page that information is updated about every 10 seconds.  This shows 30 seconds of "conversation" so I'm surprised I don't see it.  I'm guessing that updates to MyAcurite do not use HTTP packets while the updates to Wunderground do.


12:29:16.804369 24:c8:6e:0a:50:2f (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: Request who-has 10.0.1.1 tell 10.0.1.39, length 46
12:29:16.804758 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype ARP (0x0806), length 60: Reply 10.0.1.1 is-at 90:72:40:0c:8c:9f (oui Unknown), length 46
12:29:16.804762 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.ds-mail > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [S], seq 856144127, win 8192, options [mss 1460], length 0
12:29:16.870141 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.ds-mail: Flags [S.], seq 1888996999, ack 856144128, win 29200, options [mss 1460], length 0
12:29:16.870154 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.ds-mail > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [.], ack 1, win 8192, length 0
12:29:16.918282 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 521: 10.0.1.39.ds-mail > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [P.], seq 1:468, ack 1, win 8192, length 467: HTTP: GET /weatherstation/updateweatherstation.php?ID=KHIKALAH5&PASSWORD=cdj8ex5t&softwaretype=myAcuRite&dateutc=now&action=updateraw&realtime=1&rtfreq=36&action=updateraw&realtime=1&rtfreq=35&baromin=30.04&humidity=69&tempf=75.9&windspeedmph=2&winddir=90&windgustmph=8&windgustdir=203&dewptf=65.0&dailyrainin=0.00&rainin=0.00 HTTP/1.1
12:29:16.984396 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.ds-mail: Flags [.], ack 468, win 30016, length 0


12:29:18.228561 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 941: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.ds-mail: Flags [P.], seq 1:888, ack 468, win 30016, length 887: HTTP: HTTP/1.1 200 OK
12:29:18.228572 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.ds-mail: Flags [F.], seq 888, ack 468, win 30016, length 0
12:29:18.228574 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.ds-mail > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [.], ack 889, win 7305, length 0
12:29:18.257131 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.ds-mail > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [F.], seq 468, ack 889, win 8192, length 0
12:29:18.329662 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.ds-mail: Flags [.], ack 469, win 30016, length 0
12:29:18.329671 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.ds-mail > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [R.], seq 469, ack 889, win 0, length 0


12:29:19.820311 24:c8:6e:0a:50:2f (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: Request who-has 10.0.1.1 tell 10.0.1.39, length 46
12:29:19.820753 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype ARP (0x0806), length 60: Reply 10.0.1.1 is-at 90:72:40:0c:8c:9f (oui Unknown), length 46
12:29:19.820759 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.ds-slp > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [S], seq 931541627, win 8192, options [mss 1460], length 0
12:29:19.884759 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.ds-slp: Flags [S.], seq 1879097212, ack 931541628, win 29200, options [mss 1460], length 0
12:29:19.884767 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.ds-slp > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [.], ack 1, win 8192, length 0
12:29:19.932693 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 521: 10.0.1.39.ds-slp > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [P.], seq 1:468, ack 1, win 8192, length 467: HTTP: GET /weatherstation/updateweatherstation.php?ID=KHIKALAH5&PASSWORD=cdj8ex5t&softwaretype=myAcuRite&dateutc=now&action=updateraw&realtime=1&rtfreq=36&action=updateraw&realtime=1&rtfreq=35&baromin=30.04&humidity=69&tempf=75.9&windspeedmph=2&winddir=90&windgustmph=8&windgustdir=203&dewptf=65.0&dailyrainin=0.00&rainin=0.00 HTTP/1.1


12:29:19.997528 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.ds-slp: Flags [.], ack 468, win 30016, length 0

12:29:21.206741 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 941: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.ds-slp: Flags [P.], seq 1:888, ack 468, win 30016, length 887: HTTP: HTTP/1.1 200 OK
12:29:21.206752 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.ds-slp: Flags [F.], seq 888, ack 468, win 30016, length 0
12:29:21.206755 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.ds-slp > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [.], ack 889, win 7305, length 0
12:29:21.235277 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.ds-slp > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [F.], seq 468, ack 889, win 8192, length 0
12:29:21.302660 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.ds-slp: Flags [.], ack 469, win 30016, length 0
12:29:21.302677 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.ds-slp > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [R.], seq 469, ack 889, win 0, length 0
12:29:21.772624 24:c8:6e:0a:50:2f (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: Request who-has 10.0.1.1 tell 10.0.1.39, length 46
12:29:21.773381 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype ARP (0x0806), length 60: Reply 10.0.1.1 is-at 90:72:40:0c:8c:9f (oui Unknown), length 46
12:29:21.773387 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 80: 10.0.1.39.hbci > 10.0.1.1.domain: 6905+ A? www.wunderground.com. (38)
12:29:21.834066 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 172: 10.0.1.1.domain > 10.0.1.39.hbci: 6905 3/0/0 CNAME wunderground.com.edgekey.net., CNAME e12930.g.akamaiedge.net., A 23.34.142.233 (130)


12:29:22.775897 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 80: 10.0.1.39.hbci > 10.0.1.1.domain: 6906+ A? www.wunderground.com. (38)
12:29:22.777131 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 172: 10.0.1.1.domain > 10.0.1.39.hbci: 6906 3/0/0 CNAME wunderground.com.edgekey.net., CNAME e12930.g.akamaiedge.net., A 23.34.142.233 (130)


12:29:35.436030 24:c8:6e:0a:50:2f (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: Request who-has 10.0.1.1 tell 10.0.1.39, length 46
12:29:35.437424 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype ARP (0x0806), length 60: Reply 10.0.1.1 is-at 90:72:40:0c:8c:9f (oui Unknown), length 46
12:29:35.437430 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.4407 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [S], seq 1321946203, win 8192, options [mss 1460], length 0
12:29:35.502137 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.4407: Flags [S.], seq 1882165412, ack 1321946204, win 29200, options [mss 1460], length 0
12:29:35.502144 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.4407 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [.], ack 1, win 8192, length 0
12:29:35.550252 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 521: 10.0.1.39.4407 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [P.], seq 1:468, ack 1, win 8192, length 467: HTTP: GET /weatherstation/updateweatherstation.php?ID=KHIKALAH5&PASSWORD=cdj8ex5t&softwaretype=myAcuRite&dateutc=now&action=updateraw&realtime=1&rtfreq=36&action=updateraw&realtime=1&rtfreq=35&baromin=30.04&humidity=69&tempf=75.7&windspeedmph=2&winddir=90&windgustmph=8&windgustdir=203&dewptf=64.8&dailyrainin=0.00&rainin=0.00 HTTP/1.1
12:29:35.616366 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.4407: Flags [.], ack 468, win 30016, length 0


12:29:37.099683 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 941: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.4407: Flags [P.], seq 1:888, ack 468, win 30016, length 887: HTTP: HTTP/1.1 200 OK
12:29:37.099694 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.4407: Flags [F.], seq 888, ack 468, win 30016, length 0
12:29:37.099696 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.4407 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [.], ack 889, win 7305, length 0
12:29:37.131118 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.4407 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [F.], seq 468, ack 889, win 8192, length 0
12:29:37.211361 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.4407: Flags [.], ack 469, win 30016, length 0
12:29:37.211369 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.4407 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [R.], seq 469, ack 889, win 0, length 0


12:29:40.187602 24:c8:6e:0a:50:2f (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: Request who-has 10.0.1.1 tell 10.0.1.39, length 46
12:29:40.188168 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype ARP (0x0806), length 60: Reply 10.0.1.1 is-at 90:72:40:0c:8c:9f (oui Unknown), length 46
12:29:40.188173 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.4408 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [S], seq 1440711022, win 8192, options [mss 1460], length 0
12:29:40.252542 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.4408: Flags [S.], seq 1909615424, ack 1440711023, win 29200, options [mss 1460], length 0
12:29:40.252549 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.4408 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [.], ack 1, win 8192, length 0
12:29:40.300685 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 521: 10.0.1.39.4408 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [P.], seq 1:468, ack 1, win 8192, length 467: HTTP: GET /weatherstation/updateweatherstation.php?ID=KHIKALAH5&PASSWORD=cdj8ex5t&softwaretype=myAcuRite&dateutc=now&action=updateraw&realtime=1&rtfreq=36&action=updateraw&realtime=1&rtfreq=35&baromin=30.04&humidity=69&tempf=75.7&windspeedmph=2&winddir=90&windgustmph=8&windgustdir=203&dewptf=64.8&dailyrainin=0.00&rainin=0.00 HTTP/1.1
12:29:40.365022 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.4408: Flags [.], ack 468, win 30016, length 0



12:29:42.059641 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 941: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.4408: Flags [P.], seq 1:888, ack 468, win 30016, length 887: HTTP: HTTP/1.1 200 OK
12:29:42.059652 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.4408: Flags [F.], seq 888, ack 468, win 30016, length 0
12:29:42.059659 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.4408 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [.], ack 889, win 7305, length 0
12:29:42.091358 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.4408 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [F.], seq 468, ack 889, win 8192, length 0
12:29:42.155513 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 60: a23-34-142-233.deploy.static.akamaitechnologies.com.http > 10.0.1.39.4408: Flags [.], ack 469, win 30016, length 0
12:29:42.155522 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 60: 10.0.1.39.4408 > a23-34-142-233.deploy.static.akamaitechnologies.com.http: Flags [R.], seq 469, ack 889, win 0, length 0
12:29:42.636079 24:c8:6e:0a:50:2f (oui Unknown) > Broadcast, ethertype ARP (0x0806), length 60: Request who-has 10.0.1.1 tell 10.0.1.39, length 46
12:29:42.636504 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype ARP (0x0806), length 60: Reply 10.0.1.1 is-at 90:72:40:0c:8c:9f (oui Unknown), length 46
12:29:42.636513 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 80: 10.0.1.39.hbci > 10.0.1.1.domain: 6907+ A? www.wunderground.com. (38)
12:29:42.652833 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 172: 10.0.1.1.domain > 10.0.1.39.hbci: 6907 3/0/0 CNAME wunderground.com.edgekey.net., CNAME e12930.g.akamaiedge.net., A 23.34.142.233 (130)
12:29:43.638992 24:c8:6e:0a:50:2f (oui Unknown) > 90:72:40:0c:8c:9f (oui Unknown), ethertype IPv4 (0x0800), length 80: 10.0.1.39.hbci > 10.0.1.1.domain: 6908+ A? www.wunderground.com. (38)
12:29:43.640099 90:72:40:0c:8c:9f (oui Unknown) > 24:c8:6e:0a:50:2f (oui Unknown), ethertype IPv4 (0x0800), length 172: 10.0.1.1.domain > 10.0.1.39.hbci: 6908 3/0/0 CNAME wunderground.com.edgekey.net., CNAME e12930.g.akamaiedge.net., A 23.34.142.233 (130)
 
Photo of John Zwiebel

John Zwiebel

  • 26 Posts
  • 2 Reply Likes

Posted 3 months ago

  • 1

Be the first to post a reply!