What are these log entries?

racarter · June 22, 2012, 12:24pm

Entries like this appear every so often in my luaUPnP.log:

08 06/22/12 12:50:39.974 JobHandler_LuaUPnP::HandleActionRequest device: 0 service: urn:micasaverde-com:serviceId:HomeAutomationGateway1 action: e[36;1mLogIpRequeste[0m <0x2efde680>
08 06/22/12 12:50:39.975 JobHandler_LuaUPnP::HandleActionRequest argument serviceId=urn:micasaverde-com:serviceId:HomeAutomationGateway1 <0x2efde680>
08 06/22/12 12:50:39.975 JobHandler_LuaUPnP::HandleActionRequest argument action=LogIpRequest <0x2efde680>
08 06/22/12 12:50:39.975 JobHandler_LuaUPnP::HandleActionRequest argument IpAddress=192.168.0.8 <0x2efde680>
08 06/22/12 12:50:39.976 JobHandler_LuaUPnP::HandleActionRequest argument MacAddress=00:25:00:49:55:cc <0x2efde680>
08 06/22/12 12:50:48.049 JobHandler_LuaUPnP::HandleActionRequest device: 0 service: urn:micasaverde-com:serviceId:HomeAutomationGateway1 action: e[36;1mLogIpRequeste[0m <0x2efde680>
08 06/22/12 12:50:48.049 JobHandler_LuaUPnP::HandleActionRequest argument serviceId=urn:micasaverde-com:serviceId:HomeAutomationGateway1 <0x2efde680>
08 06/22/12 12:50:48.050 JobHandler_LuaUPnP::HandleActionRequest argument action=LogIpRequest <0x2efde680>
08 06/22/12 12:50:48.050 JobHandler_LuaUPnP::HandleActionRequest argument IpAddress=192.168.0.8 <0x2efde680>
08 06/22/12 12:50:48.050 JobHandler_LuaUPnP::HandleActionRequest argument MacAddress=00:25:00:49:55:cc <0x2efde680>
01 06/22/12 12:50:49.295 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/CgiTagMenu?page=Top&Language=0e[0m <0x2c1b1680>
01 06/22/12 12:50:49.305 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/CgiTagMenu?page=Top&Language=0e[0m <0x2c1b1680>
01 06/22/12 12:50:49.314 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/CgiTagMenu?page=Top&Language=0e[0m <0x2c1b1680>
01 06/22/12 12:50:49.324 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/get_log.cgie[0m <0x2c1b1680>
01 06/22/12 12:50:49.334 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/get_log.cgie[0m <0x2c1b1680>
01 06/22/12 12:50:49.346 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/get_log.cgie[0m <0x2c1b1680>
01 06/22/12 12:50:49.359 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/top.htme[0m <0x2c1b1680>
01 06/22/12 12:50:49.371 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/top.htme[0m <0x2c1b1680>
01 06/22/12 12:50:49.382 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/top.htme[0m <0x2c1b1680>
01 06/22/12 12:50:49.393 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/index.htmle[0m <0x2c1b1680>
01 06/22/12 12:50:49.404 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/index.htmle[0m <0x2c1b1680>
01 06/22/12 12:50:49.413 e[31;1mFileUtils::ReadURL 7/resp:0 size 0 http://192.168.0.8/index.htmle[0m <0x2c1b1680>

The IP address is my wife’s MacBook Pro, which is not switched on. Similar log entries refer to my iPhone or some other device totally unconnected with Vera.

Any ideas?

sparkejj · June 22, 2012, 12:41pm

Presumably Vera learning about devices on your LAN and scanning them to auto-detect cameras and such.

See also this prior topic.

mcvflorin · June 22, 2012, 12:57pm

@oTia@ is correct. When Vera detects a new device on the network it tries various URLs to find what type of device it is.

racarter · June 22, 2012, 3:20pm

Thanks guys.

guessed · June 22, 2012, 3:26pm

You may also want to look inside your JSON file, in /etc/cmh. They used to persist these there as well, so it wasn’t just an initial discovery but a long term store of IP and MAC.

mcvflorin · June 22, 2012, 3:31pm

They are actually in the user_data, under the ip_requests tag. The reason they’re stored is so that Vera will know if an IP was checked or not.

guessed · June 22, 2012, 4:30pm

Florin,
It was to close the loop on what’s done with this data after its been captured. Since it goes into those files, which can also be backed up to MiOS servers, effectively a lot of data about people’s internal networks, and devices (like the MAC) is being kept.

A safer way to do this would be to capture this specific information outside of the user-data JSON files, and not have this information backed up to the MiOS devices (or ever sent to a 3rd party mobile app, for example)

FYI: in some countries, IP addresses are considered PII. Any form of tracking/capture of these needs the be disclosed.

mcvflorin · June 22, 2012, 4:41pm

@guessed,

Ok, I’ll remind Aaron about this.

brientim · June 22, 2012, 10:10pm

[quote=“guessed, post:7, topic:171875”]Florin,
It was to close the loop on what’s done with this data after its been captured. Since it goes into those files, which can also be backed up to MiOS servers, effectively a lot of data about people’s internal networks, and devices (like the MAC) is being kept.

A safer way to do this would be to capture this specific information outside of the user-data JSON files, and not have this information backed up to the MiOS devices (or ever sent to a 3rd party mobile app, for example)

FYI: in some countries, IP addresses are considered PII. Any form of tracking/capture of these needs the be disclosed.[/quote]

In some countries it is illegal unless there is a specific need of a government agency.

racarter · June 23, 2012, 8:47am

Just in case any bad people (or shady government agencies) are reading this, I should mention that I changed the MAC addresses before I posted the log segment.