Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


josephhinvest

1543 posts

Uber Geek

ID Verified
Trusted

#177281 28-Jul-2015 18:48
Send private message

This is driving me insane. Netcomm NF8AC, restored to factory default settings yesterday. Constantly stops and starts, connected with iPhones and Mac machines. LAN traffic works fine, only Internet traffic is affected. Have tried changing DNS servers etc, seems to work for a while then stops. I've noticed this in the logs from tonight, any ideas?
Thanks.

Jul 28 18:35:19 daemon alert kernel: Intrusion -> IN=pppoa0 OUT= MAC= SRC=50.161.128.217 DST=122.58.102.209 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=1560 DF PROTO=TCP SPT=51533 DPT=51546 WINDOW=8192 RES=0x00 SYN URGP=0 MARK=0x8000000

This is happening every few minutes as per the screenshot below.
Click to see full size


Oh here's one bizarre thing. I can log (VNC) in to my media machine via 4G connection, using Screens Connect. But then I remotely open Safari on the machine, it often cannot load webpages. I don't understand at all!

Cheers,
Joseph

View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3
freitasm
BDFL - Memuneh
79250 posts

Uber Geek

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #1353669 28-Jul-2015 19:04
Send private message

Do you have an alarm connected to the line? A phone without a filter? A machine with LOTS of torrents perhaps overloading the control tables on the router?






Please support Geekzone by subscribing, or using one of our referral links: Samsung | AliExpress | Wise | Sharesies | Hatch | GoodSyncBackblaze backup




josephhinvest

1543 posts

Uber Geek

ID Verified
Trusted

  #1353686 28-Jul-2015 19:13
Send private message

freitasm: Do you have an alarm connected to the line? A phone without a filter? A machine with LOTS of torrents perhaps overloading the control tables on the router?




Ta for ideas. No alarm. Only one phone in house, with line filter. No other internet use currently as have tried to eliminate anything that may be saturating connection.
Also these tests results from modem. Feels like a DNS issue to me, I just can't resolve it.

Click to see full size

tdgeek
29740 posts

Uber Geek

Trusted
Lifetime subscriber

  #1353702 28-Jul-2015 19:22
Send private message

Do you have a Spark supplied modem to test?

Any super cool settings in the Netcomm that may cause issues?





josephhinvest

1543 posts

Uber Geek

ID Verified
Trusted

  #1353709 28-Jul-2015 19:31
Send private message

tdgeek: Do you have a Spark supplied modem to test?

Any super cool settings in the Netcomm that may cause issues?




Thanks. I'll have a look for an old modem. I have a feeling they are all gone, I've had quite a few over the years!
No special settings, restored to defaults and have just done the bare minimum this time to avoid conplications. Or so I thought!

  #1353863 28-Jul-2015 21:49
Send private message

I have the same modem and am using it for VDSL, i have the same results to you on that image on the diagnostics page. so i dont think thats an issue.

cant be any more help im afraid


quickymart
13924 posts

Uber Geek

ID Verified

  #1353878 28-Jul-2015 22:04
Send private message

I have a Netcomm NF4V (same brand but different model) which was dropping signal all the time. I took it back and got a brand new one. No issues since.

josephhinvest

1543 posts

Uber Geek

ID Verified
Trusted

  #1353906 28-Jul-2015 22:19
Send private message

Jase2985: I have the same modem and am using it for VDSL, i have the same results to you on that image on the diagnostics page. so i dont think thats an issue.

cant be any more help im afraid



Thanks for that. I don't know what the tests actually test which makes it hard to understand :)

Cheers,
Joseph

 
 
 

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.
josephhinvest

1543 posts

Uber Geek

ID Verified
Trusted

  #1353910 28-Jul-2015 22:23
Send private message

quickymart: I have a Netcomm NF4V (same brand but different model) which was dropping signal all the time. I took it back and got a brand new one. No issues since.


Yep It could be faulty. However, rhe modem doesn't seem to drop the DSL, or wifi connection. LAN traffic always seems to be ok, and the DSL connection stays up. I just get errors like "Facebook.com failed to load because the server couldn't be found" etc.

Cheers


josephhinvest

1543 posts

Uber Geek

ID Verified
Trusted

  #1353912 28-Jul-2015 22:28
Send private message

I'm still getting logs of these in my log and I'm not sure what they mean...

Facility: daemon
Severity: alert

Jul 28 22:00:21 kernel: Intrusion -> IN=pppoa0 OUT= MAC= SRC=91.121.2.84 DST=122.57.189.54 LEN=48 TOS=0x00 PREC=0x00 TTL=116 ID=36721 PROTO=TCP SPT=26633 DPT=20000 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000

ubergeeknz
3344 posts

Uber Geek

Trusted
Vocus

  #1353914 28-Jul-2015 22:30
Send private message

Try disabling DNS proxy, see if that works for you. You'll need to reconnect devices so they pick up the proper DNS addresses.

Talkiet
4792 posts

Uber Geek

Trusted

  #1353940 28-Jul-2015 22:46
Send private message

You want to find out if all traffic is dying when you have issues, or if it is just DNS. Try running a continuous ping to something like...

ping 219.88.188.4 -t

Leave that running in a window and when you notice browsing failures pop back to that window and see if you have a break in the successful pings...

Cheers - N





Please note all comments are from my own brain and don't necessarily represent the position or opinions of my employer, previous employers, colleagues, friends or pets.


BarTender
3606 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #1354017 29-Jul-2015 06:16
Send private message

Those logs are caused by outside computers attempting to connect to you. Have you run a torrent client on port 20000 or 51516?? Otherwise you could be getting DDoSed.
Does going into the console and doing a disconnect and reconnect of the ppp session fix it??

josephhinvest

1543 posts

Uber Geek

ID Verified
Trusted

  #1354070 29-Jul-2015 08:08
Send private message

BarTender: Those logs are caused by outside computers attempting to connect to you. Have you run a torrent client on port 20000 or 51516?? Otherwise you could be getting DDoSed.
Does going into the console and doing a disconnect and reconnect of the ppp session fix it??


Thanks. Yes that what I had thought. To check, I've rebooted modem, got new IP address. Signed out of anything I can think of that phones home, specifically Screens Connect. And now since rebooting the modem, am still getting these in the logs.

kernel: Intrusion -> IN=pppoa0 OUT= MAC= SRC=61.160.224.128 DST=122.60.25.213 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=56257 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 MARK=0x8000000
Nov 19 00:39:16 daemon alert kernel: Intrusion -> IN=pppoa0 OUT= MAC= SRC=222.186.21.202 DST=122.60.25.213 LEN=40 TOS=0x00 PREC=0x00 TTL=109 ID=256 PROTO=TCP SPT=61061 DPT=5901 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000
Nov 19 00:45:58 daemon alert kernel: Intrusion -> IN=pppoa0 OUT= MAC= SRC=222.186.21.102 DST=122.60.25.213 LEN=40 TOS=0x00 PREC=0x00 TTL=102 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 MARK=0x8000000

freitasm
BDFL - Memuneh
79250 posts

Uber Geek

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #1354145 29-Jul-2015 09:39
Send private message

Have you run a full anti-spyware scan with Malwarebytes yet?





Please support Geekzone by subscribing, or using one of our referral links: Samsung | AliExpress | Wise | Sharesies | Hatch | GoodSyncBackblaze backup


  #1354154 29-Jul-2015 09:45
Send private message

freitasm: Have you run a full anti-spyware scan with Malwarebytes yet?



and spybot

and AV



 1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic





News and reviews »

Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01


Epson Launches New AM-C550Z WorkForce Enterprise printer
Posted 9-Jul-2025 18:22


Samsung Releases Smart Monitor M9
Posted 9-Jul-2025 17:46


Nearly Half of Older Kiwis Still Write their Passwords on Paper
Posted 9-Jul-2025 08:42


D-Link 4G+ Cat6 Wi-Fi 6 DWR-933M Mobile Hotspot Review
Posted 1-Jul-2025 11:34


Oppo A5 Series Launches With New Levels of Durability
Posted 30-Jun-2025 10:15









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.