Why is my truck talking to all these IP-addresses?

[hb.sagen]

Did you filter your pcap capture by the truck's MAC or does your capture include other traffic? I'm not seeing the .mil from my truck in the last 30 days.

Yes, I did filter the capture to my trucks mac. I will recheck the data to be sure.

Sponsored

 

[hb.sagen]

Yes, I did filter the capture to my trucks mac. I will recheck the data to be sure.

It was a DNS request from my truck to the army address, and it was refused along all the other DNS requests to the root servers. I tries a lot of different root servers, and they all refuse.

And then it uses 1.1.1.1 or dns.google and gets a reply. It even use my default dns resolver from time to time, and gets a response.