Ring Accessories
Browse posts, comment, and join in the discussion about Ring Chime, Chime Pro, and more.
Critical Bug: Denial of Service - Ring Chime 2nd Generation Erroneous ARP Response
Hello,
This started as an issue several months ago, my primary computer would sporadically fail to create new connections occurring several times a day. Resetting the network card would fix the issue temporarily before happening again resulting in intermittent denial of service. This led me down a path of purchasing a replacement network card only to have the same symptoms reoccur despite the new card from a different brand. Desperate to find a solution I took some network captures and enlisted the assistance of a senior network engineer.
The packet capture confirmed the issue, and further troubleshooting during an outage event determined that a device was responding to ARP requests for XX, after a MAC lookup it was determined that this device is:
Ring Chime (2nd generation)
Model: 5f67e9
MAC: 9C:76:13:DD:56:58
This device has cost me many hours of time and over 60 dollars in troubleshooting costs. It was provided to me under warranty to replace my previous chime device that failed due to a catastrophic hardware failure.
The problem arises when the ring chime responds to an ARP request when it shouldn't for XX. Any new traffic immediately starts being sent to the ring device instead of the router which of course yields no response because it isn't the router. This can be seen here where my ARP table got updated to the ring device for XX, and the wireshark capture where frames are now being sent to the ring chime as the destination creating the denial of service.
Moderators keep removing my screenshots and editing my post so I will describe what is in them here:
Screenshot 1: displays the ARP table from my computer with 2 cmd windows.
The top window shows the ARP table with the correct MAC address and gateway address association
The bottom window shows the ARP table with the incorrect MAC address and gateway address association from the Ring Chime
Screenshot 2: shows a Wireshark packet capture of DNS traffic querying for a lookup of edge.microsoft.com in the header information expanded it shows that the destination MAC on the ethernet frame is destined to the Ring Chime
71 •
3 •
0 •
03-07-2024 15:22:14
Responses (3)
- J
Hi @user_dbbeeb. It would be best for you to reach out to our support team for further assistance. They will have access to being able to investigate this more in depth than we can here in the Community. Give our support team a call using one of the numbers available here.
•0
04-07-2024 17:49:42
- U
Hello, thanks for the response, however I did call the customer service number and they do not have the expertise to understand what I am referring to. I was given a complaints email address to provide the full details on the error, but that email address did not work and returned undeliverable with an error 550: Mailbox unavailable.
•0
11-07-2024 12:33:12
•
- C
Hi @user_dbbeeb. I wanted to clarify that we are not removing your screenshots. The Community recently underwent some changes, and we're still working out some errors with image uploads.
In the meantime, try reaching out on Facebook @Ring via private message. Our social support team should be able to view your screenshots, and escalate this concern since it deals with advanced network settings.•0
12-07-2024 14:34:22
•
Didn't find an answer ?
Log in or create your Ring account to post a question and join in the on the conversation.
Community Resources
Most Helpful Members
View All
©2024 Ring LLC or its affiliates
user_dbbeeb
The XX is the gateway address and can be seen in the top line of the images pointing out the ARP table issue, seems the community page filters IP addresses from text even if they're a local address.
0
03-07-2024 15:32:10
•