[WXC/VFX] The nightly reboot mystery

Forums › Vodafone New Zealand (including Vodafone, WxC, Farmside) › [WXC/VFX] The nightly reboot mystery

Se7ensyns

133 posts

Master Geek

#20245 17-Mar-2008 22:36

I am now telecom unleashed and using fusion however I have spotted an issue but am not sure if happend prior to VFX or after the install as I never took any notice. At 8:55pm every night my router drops its ADSL connection and it takes until 9:00pm to get a connection back. This is absolutely clockwork and is kind of freaky. I have checked my PC's and my Router and cant find anything that would be causing it. Hey IO have even turned of all internet enabled devices and it still does it.

I have logged a call to Tech Sup who said they would look into it but was wondering if anyone else out there has seen this or is experiencing this?

It is a bit of a bummer as on the Friday night I was doing a change at work from home and lost me connection in the middle of it. Thak god Iw as term served and had T3G. But the other thing is is that when I loser the connection I lose my phone so it is annoying. I am not angry just curious and frustrated I cant find what is causing it. It is a good prompter to go and make the missus her nightly cup of tea

Trend Micro

Affiliate link

Affiliate link: Trend Micro provides enhanced protection against viruses, malware, ransomware and spyware and more for your connected devices.

marmel

1731 posts

Uber Geek

ID Verified

Trusted

Subscriber

#117261 18-Mar-2008 00:02

Have you thought of the possibility that your missus has set it up that way?

brdivu

23 posts

Geek

#117272 18-Mar-2008 08:00

Do you have a house security alarm at all?

I had an issue where my DSL was dropping out at regular intervals too, and it turned out to be the alarm trying to dial out, and was disconnecting the rest of the phone jacks as it did so. (it had previously been monitored)

maverick

3594 posts

Uber Geek

Trusted

WorldxChange

#117273 18-Mar-2008 08:05

Well Jason, you not going mad you are indead disconnecting at 20:55 each night by the looks of it, I took a look at your records for the last few days and almost exactly at 20:55 +- 20 seconds we get a user request disconnect from your end, got to admit thats rather strange

The disconnect reason is user request so it looks like your router itself possibly could be causing this, does your router have any logs you could enable to see what it is doing , also what type of router is it ?

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

mruane

420 posts

Ultimate Geek

#117365 18-Mar-2008 19:00

The culprit in these cases is nearly always the cleaner who rips the power plug out of the wall to plug in the vacuum cleaner - happens every time.

Cheers Mike

Se7ensyns

133 posts

Master Geek

#117407 18-Mar-2008 21:25

Thanks Maverick. I have not received a fault number in email so not sure who to send the logs to. I had a look tonight as well and saw a couple of intrusions alerts which was weird one i traced back to a place called patmedia.net and the other dynamic.hinet.net which accoridng to the mighty goolge looks like some sort of spam site. The other intrusions look like the were from Xnet and was possbily to do with VOIP. I cnat get a decent time of occurance due the the logging function of the router.

The logging on the router is not that good as it is quite a few years old (US Robotics 9106) it has the latest firmware revision.

Radiotron

148 posts

Master Geek

#117419 18-Mar-2008 22:04

Hey, I have a USR9106, no funny reboots, though, as you say these are getting a bit old now.
Off topic, but do you have any funnies happening with the wirelss on it? Mine, get to about 86Mb downloaded via wireless and it dies, loses DNS and has to be rebooted, wired LAN is fine, this only happens with big files like isos, or the install pkg for OpenOffice, browsing and email is fine, mucho puzzlement. And, it has the last firmware in it, anyone heard of this, nowt from a spot of googling and so on.

maverick

3594 posts

Uber Geek

Trusted

WorldxChange

#117446 19-Mar-2008 06:29

Hi Jason,

You can post whaever logs you have here if you like, just remove your IP address from them

I see it did occur again last night really strange and since we see user request I can only put it down to the router or some short of scheduled event as the times are generally exactly 20:55 +- 20/30 secs so it's not a random event something is causing this, any chance you can try another router to try as I think that will be the only way to prove if it's the router or not.

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

Darc

30 posts

Geek

#117471 19-Mar-2008 09:18

Like Radiotron, I too am having a of a "lag-off", mostly through the day, occassional evenings. Will be browsing, system gradually slows down and within 5 minutes grinds to a halt. Sometimes a power re boot will fix it, sometimes it takes a couple, others I give up for a couple of hours. Using a PAP2T, 6 weeks old. Wouldn't know where to find the log and following the instructions of the helpdesk to me, is daunting. ( though with due respect, they are extremely patient and cheerful) so I watch these topics with interest for possible solutions.

maverick

3594 posts

Uber Geek

Trusted

WorldxChange

#117479 19-Mar-2008 10:03

Darc: Like Radiotron, I too am having a of a "lag-off", mostly through the day, occassional evenings. Will be browsing, system gradually slows down and within 5 minutes grinds to a halt. Sometimes a power re boot will fix it, sometimes it takes a couple, others I give up for a couple of hours. Using a PAP2T, 6 weeks old. Wouldn't know where to find the log and following the instructions of the helpdesk to me, is daunting. ( though with due respect, they are extremely patient and cheerful) so I watch these topics with interest for possible solutions.

This will be different, the PAP2T is only a voice device and only use's your internet connection it dosn't control it, ie it wont effect your browsing speed , this will be possibly be ancnnection issue or most likely your router,

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

Darc

30 posts

Geek

#117507 19-Mar-2008 13:02

oh!!!. Told you I learn from these posts. Guess I'm just galloping to keep up with technology.

coffeebaron

5924 posts

Uber Geek

Trusted

Lifetime subscriber

#117615 19-Mar-2008 20:06

Hi Jason,

Have you factory reset your router, or checked for a firmware upgrade? It may be there is a stuck setting in there that causes the router to reset on this 24 hr cycle; maybe trying to acquire a new public IP address or something like that.

Also if you haven't tried a factory reset, do this, but at a different time of day and see if it reboots at the new time. That way, if you can't fix the issue, you maybe able to move the issue to a more convenient time. Ah, the long weekend, what a great time to stay up till 3am and give it a try.

Rural IT and Broadband support.

Broadband troubleshooting and master filter installs.
Starlink installer
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally
Rural Broadband RBI installer for Ultimate Broadband and Full Flavour

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

Se7ensyns

133 posts

Master Geek

#117641 19-Mar-2008 21:18

Good point. I havent factory reset for at least a few weeks. As mentioned in an earlier post I am seeing intrusion alerts comming in on a regular basis and the destination is Xnet in timaru but the source is either Japan, China, Austria or Sth Korea. So I am not sure if this is linked or if it is just a VOIP thing as I have had that tuned on in the last few days.

1st day 04:59:00	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.167.117.247 DST=118.90.25.156 LEN=64 TOS=0x00 PREC=0x00 TTL=34 ID=20975 DF PROTO=TCP SPT=3696 DPT=2967 WINDOW=53760 RES=0x00 SYN URGP=0
1st day 04:58:57	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.167.117.247 DST=118.90.25.156 LEN=64 TOS=0x00 PREC=0x00 TTL=34 ID=20547 DF PROTO=TCP SPT=3696 DPT=2967 WINDOW=53760 RES=0x00 SYN URGP=0

Source Traced to....

Country information :
IP:	118.167.117.247	Country:	Taiwan (Province of China)	Country Code:	TW
Region:	T'AI-PEI		City:	taipei
ISP	CHTD, Chunghwa Telecom Co.,Ltd.

1st day 06:36:25	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.19.38.214 DST=118.90.25.156 LEN=64 TOS=0x00 PREC=0x00 TTL=30 ID=39462 DF PROTO=TCP SPT=2262 DPT=1433 WINDOW=53760 RES=0x00 SYN URGP=0
1st day 06:36:22	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.19.38.214 DST=118.90.25.156 LEN=64 TOS=0x00 PREC=0x00 TTL=30 ID=38107 DF PROTO=TCP SPT=2262 DPT=1433 WINDOW=53760 RES=0x00 SYN URGP=0

Source Traced to....

Country information :
IP:	118.19.38.214	Country:	Japan	Country Code:	JP
Region:			City:
ISP	NTT Communications Corporation

1st day 07:57:12

user

alert

klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=211.112.95.3 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=11262 PROTO=TCP SPT=10074 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0

Source trace to...

Country information :
IP:	211.112.95.3	Country:	Korea, Republic of	Country Code:	KR
Region:	SOUL-T'UKPYOLSI		City:	seoul
ISP	KRNIC

1st day 08:01:52	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=56186 DF PROTO=TCP SPT=4324 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 08:01:46	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=51083 DF PROTO=TCP SPT=4324 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 08:01:43	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=48442 DF PROTO=TCP SPT=4324 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0

Source Traced to...

Country information :
IP:	118.236.185.159	Country:	Japan	Country Code:	JP
Region:			City:
ISP	USEN CORPORATION

1st day 08:14:14	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.166.77.137 DST=118.90.25.156 LEN=64 TOS=0x00 PREC=0x00 TTL=32 ID=57060 DF PROTO=TCP SPT=2442 DPT=2967 WINDOW=53760 RES=0x00 SYN URGP=0
1st day 08:14:11	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.166.77.137 DST=118.90.25.156 LEN=64 TOS=0x00 PREC=0x00 TTL=32 ID=56617 DF PROTO=TCP SPT=2442 DPT=2967 WINDOW=53760 RES=0x00 SYN URGP=256

Source traced to...

Country information :
IP:	118.166.77.137	Country:	Taiwan (Province of China)	Country Code:	TW
Region:	T'AI-PEI		City:	taipei
ISP	CHTD, Chunghwa Telecom Co.,Ltd.

1st day 08:51:39	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=13288 DF PROTO=TCP SPT=2615 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 08:51:33	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=8838 DF PROTO=TCP SPT=2615 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 08:51:30	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=6535 DF PROTO=TCP SPT=2615 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0

Source traced to...

Country information :
IP:	118.236.185.159	Country:	Japan	Country Code:	JP
Region:			City:
ISP	USEN CORPORATION

1st day 11:25:06	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=22893 DF PROTO=TCP SPT=3539 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 11:25:03	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=19232 DF PROTO=TCP SPT=3539 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 11:14:52	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=13413 DF PROTO=TCP SPT=2640 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 11:14:46	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=7647 DF PROTO=TCP SPT=2640 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 11:14:43	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=4856 DF PROTO=TCP SPT=2640 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 10:50:04	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=33234 DF PROTO=TCP SPT=4347 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 10:49:58	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=29242 DF PROTO=TCP SPT=4347 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 10:49:55	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=26158 DF PROTO=TCP SPT=4347 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0

Source traced to...

Country information :
IP:	118.236.185.159	Country:	Japan	Country Code:	JP
Region:			City:
ISP	USEN CORPORATION

1st day 14:17:20

user

alert

klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=222.187.220.22 DST=118.90.25.156 LEN=40 TOS=0x00 PREC=0x00 TTL=101 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0

Source traced to...

Country information :
IP:	222.187.220.22	Country:	China	Country Code:	CN
Region:	JIANGSU		City:	nanjing
ISP	CHINANET jiangsu province network

1st day 15:00:49

user

alert

klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=61.163.231.76 DST=118.90.25.156 LEN=40 TOS=0x00 PREC=0x00 TTL=106 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0

source traced to...

Country information :
IP:	61.163.231.76	Country:	China	Country Code:	CN
Region:	HENAN		City:	ZhengZhou
ISP	CNCGROUP Henan province network

1st day 16:29:41	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=51471 DF PROTO=TCP SPT=2076 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 16:29:35	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=48464 DF PROTO=TCP SPT=2076 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 16:29:32	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=47085 DF PROTO=TCP SPT=2076 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0

1st day 15:36:53	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=29079 DF PROTO=TCP SPT=3167 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 15:36:47	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=25952 DF PROTO=TCP SPT=3167 DPT=2967 WINDOW=65044 RES=0x00 SYN URGP=0
1st day 15:36:44	user	alert	klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=118.236.185.159 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=108 ID=24461 DF

Source traced to...

Country information :
IP:	118.236.185.159	Country:	Japan	Country Code:	JP
Region:			City:
ISP	USEN CORPORATION

1st day 17:21:50

user

alert

klogd: Intrusion -> IN=ppp41 OUT= MAC= SRC=85.125.81.197 DST=118.90.25.156 LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=59689 PROTO=TCP SPT=59000 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0

coffeebaron

5924 posts

Uber Geek

Trusted

Lifetime subscriber

#117653 19-Mar-2008 21:53

I wouldn't expect intrusion alerts to be the issue. This is just life on the Internet, i.e. people probing IP address with random port scans, hoping to find a vulnerable PC. That's why you have routers with NAT & Firewalls to help protect the innocent. Even if this was somehow the cause, then I doubt it would trigger the reset on a consistent 24 hr cycle.

I'd suggest factory reset at a different time, say 5pm or 7am. See if that fixes it to start with, and if it doesn't, does it then reset at the new time? After that, see if there is a newer firmware and try that too.

Rural IT and Broadband support.

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

Trkstr

23 posts

Geek

#118279 23-Mar-2008 22:08

I was just browsing through the forums just now and stumbled upon this post. I'm sorry if i'm bumping up an old post but this may help:

I remember when my family first moved into this new house, we had a very old television. Every night, without fail, at about 9pm the lights would flicker and the TV would die and it wouldn't power on any more. it turns out the fuse had blown.

So the next day i popped down to the local DSE and picked myself up a new fuse and came home and popped it in: the TV lives again. Until the exact same time the next night. So i went an bought myself a few more fuses etc.

I managed to time the exact moment that it would happen down to the minute (from memory it was about 9pm during summer).

My suggestion, next time at about 9pm see if your lights flicker a little or electricity goes a bit funny. If it is, it could be the power adapter for the router not handling. You did say you had a slightly older router.

I don't know what happens at 9pm, but i'm guessing its to do with power.