3

Recently I called my ISP and talked to them about a problem I experienced with a PC. They asked me "Are you talking about the PC that is connected in port 2 with X hostname?"

It got me wondering how they know that, how can my ISP know the port which my device is connected to and how would that allow them to see the hostname?

I have FTTP (Fibre to the Premises) and a GPON ONU given to me by my ISP.

2
  • Probably they have access to their router that you have at home.
    – Hugo
    Jun 20, 2018 at 16:39
  • Remote Management status Inform Status: no inform connect ACS Connect Status: no ACS connect Config Status: no config information
    – user32
    Jun 20, 2018 at 16:43

2 Answers 2

4

TL;DR - They will have remote access to the router they provided and thus they will be able to obtain such information.


Yes, this is plausible. As I am sure you're aware, your ISP will give you a router when you get an Internet Service from them, it's no secret that they have access to this router.

The ports that are on the back of the router are access ports meaning, you plug a device in and you access the network, there will be ways in which they can see the status of these ports, what's connected, etc.

I cannot tell you exactly what they're doing to see this information because I don't know the inner-workings of these types of "routers" and I don't work for your ISP. But in essence yes they will have access to that information and there isn't a whole lot you can do about it.

0

All of your modems and routers run an operating system underneath. If that modem/router/modem+router combo belongs to your ISP, BELIEVE, they have a tap into it.

I know my modem has a couple open ports on it that AT&T uses for remote administration.

So let's answer some questions for you.

What can they see on your network?

Everything that passes through their tunnel, believe they have access to if they want.

Now it would be a gross violation of privacy and ethics if they were doing some type of deep packet inspection on all your traffic but if I had to bet my life on it, I'd bet they were collecting data on every single customer.

This data is likely limited to DNS queries but it could go deeper. They might be collecting the data about the machines on your network but I highly doubt it considering most people have setups like I do. That is, the isp modem is connected to a 3rd party router. So all the modem would see in it's device list would be the router. Pretty useless if you're trying to market to people that have a specific device.

How do they see your machines?

Like I mentioned earlier, these modems and routers run on operating systems and these operating systems have something called an Arp Table in them. The arp table keeps track of known hosts. A known host is anyone that communicates with this machine.

What does the Arp Table have in it?

You'll find that the arp table has hostname ip address mac address and what interface it's connected to.

Here's a screenshot of my router. I just logged in and dumped the arp table out with arp -a

enter image description here

My apologies for redacting so much of it but I don't want my internal network ips and device mac addresses floating around.

So this image is of my router which I own. My modem should only have my router in its arp table so AT&T would only see something along the lines of

Tomato-Router 192.168.1.2 at FF:FF:FF:FF:FF:FF [ether] eth0

4
  • @Joshua.J I'm not suggesting that the ISP logs into the router and dumps the arp table by hand. However, why wouldn't whatever user portal they're using do this? Do you know of a more efficient way to get all this information in one command? I'd say it's very likely what ever interface they're using, does this. My point though, wasn't how they're doing it, but that the information is easily available. Jul 11, 2018 at 19:25
  • @Joshua.J I answered how an ISP could do it. I'm sorry if you don't like that. Jul 11, 2018 at 19:50
  • @Joshua.J I provided the best answer I could based on my technical experience with networking, building web interfaces, and programming in general. It's a reasonable assumption to think that this is how the ISP does it. The information they're grabbing isn't going to come from any place else. Thank you for your input though. Jul 11, 2018 at 19:54
  • @Joshua.J I think you might be taking my answer a little out of context. The OP Asked if it was possible. I said yes, and here's a way it can be done. I really do appreciate your technical analysis though. Perhaps you should add it to your answer. I'm sure it would benefit the community. Have a nice day, Jul 11, 2018 at 20:01

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .