what is your best router uptime?

Isitme · 17-08-08, 02:36 PM

^^^^^
Have a look in the router log, see what it says there about LCP down etc. It looks like your noise margin drops to a point where the router reboots.

Brian69 · 17-08-08, 03:38 PM

I know that this will not cut much ice with the uber speed geek kids, but I have a neighbour who has been up for 6days at 6560 on a 49dB line and I think that is rather good

malc-c · 17-08-08, 04:49 PM

Quote:

Originally Posted by Isitme

^^^^^
Have a look in the router log, see what it says there about LCP down etc. It looks like your noise margin drops to a point where the router reboots.

Tom, seems strange things happened at 3am

Quote:

Aug 17 03:52:34 (none) daemon.crit pppd[619]: Clear IP addresses. Connection DOWN.

Aug 17 03:52:34 (none) daemon.crit pppd[619]: Clear IP addresses. PPP connection DOWN.

Aug 17 03:52:35 (none) user.crit kernel: ADSL G.994 training

Aug 17 03:52:44 (none) user.crit kernel: ADSL G.992 started

Aug 17 03:52:48 (none) user.crit kernel: ADSL G.992 channel analysis

Aug 17 03:52:54 (none) user.crit kernel: ADSL link up, interleaved, us=764, ds=16381

Aug 17 03:53:38 (none) daemon.crit pppd[619]: PPP LCP UP.

Aug 17 03:53:38 (none) daemon.crit pppd[619]: Received valid IP address from server. Connection UP.

Aug 17 04:13:08 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=89.127.175.218 DST=90.217.13.36 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=11213 DF PROTO=TCP SPT=53157 DPT=49663 WINDOW=8192 RES=0x00 SYN URGP=0

Aug 17 04:13:11 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=89.127.175.218 DST=90.217.13.36 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=11426 DF PROTO=TCP SPT=53157 DPT=49663 WINDOW=8192 RES=0x00 SYN URGP=0

Aug 17 04:13:17 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=89.127.175.218 DST=90.217.13.36 LEN=48 TOS=0x00 PREC=0x00 TTL=120 ID=11755 DF PROTO=TCP SPT=53157 DPT=49663 WINDOW=8192 RES=0x00 SYN URGP=0

Aug 17 04:19:41 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=218.6.2.167 DST=90.217.13.36 LEN=40 TOS=0x00 PREC=0x00 TTL=108 ID=37733 PROTO=TCP SPT=6000 DPT=135 WINDOW=16384 RES=0x00 SYN URGP=0

Aug 17 05:04:03 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=85.214.46.2 DST=90.217.13.36 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=6000 DPT=8080 WINDOW=16384 RES=0x00 SYN URGP=0

Aug 17 06:07:41 (none) user.crit kernel: ADSL link down

Aug 17 06:07:42 (none) user.crit kernel: ADSL G.994 training

Aug 17 06:07:43 (none) daemon.crit pppd[619]: Clear IP addresses. Connection DOWN.

Aug 17 06:07:43 (none) daemon.crit pppd[619]: Clear IP addresses. PPP connection DOWN.

Aug 17 06:07:51 (none) user.crit kernel: ADSL G.992 started

Aug 17 06:07:56 (none) user.crit kernel: ADSL G.992 channel analysis

Aug 17 06:08:02 (none) user.crit kernel: ADSL G.992 message exchange

Aug 17 06:08:02 (none) user.crit kernel: ADSL link up, interleaved, us=764, ds=16381

Aug 17 06:08:20 (none) daemon.crit pppd[619]: PPP LCP UP.

Aug 17 06:08:20 (none) daemon.crit pppd[619]: Received valid IP address from server. Connection UP.

Aug 17 06:08:21 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=90.20.201.59 DST=90.218.18.65 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=6368 DF PROTO=TCP SPT=57019 DPT=49663 WINDOW=8192 RES=0x00 SYN URGP=0

Aug 17 06:08:21 (none) user.alert kernel: Intrusion -> IN=ppp_0_38_1 OUT= MAC= SRC=90.20.201.59 DST=90.218.18.65 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=6384 DF PROTO=TCP SPT=57021 DPT=49663 WINDOW=8192 RES=0x00 SYN URGP=0

<snip>

samperry209 · 17-08-08, 04:56 PM

highest ive got was 200 hours... but im planning to beat it now my line is sorted!!

do skyresync your line at 4am or something?

Isitme · 17-08-08, 05:51 PM

@Malcolm.
It does look like your connection is dropping. It is strange if it does this during the night and not during the day. The " user.crit kernel: ADSL G.994 training" is also a bit strange, I have never seen this in my logs, but then I am not on Max, which could be the difference.

You also seem to have had some hacking attempts, but I don't think they are anything to worry about. Someone with more knowledge of this than me might think differently.

Saturday · 17-08-08, 06:04 PM

Quote:

Originally Posted by Isitme

The " user.crit kernel: ADSL G.994 training" is also a bit strange, I have never seen this in my logs, but then I am not on Max, which could be the difference.

Sagem output.

Quote:

Originally Posted by Isitme

It does look like your connection is dropping. It is strange if it does this during the night and not during the day.

Early hours of the morning was typical of DLM but I thought that had stopped now.

Quote:

Originally Posted by Isitme

You also seem to have had some hacking attempts, but I don't think they are anything to worry about. Someone with more knowledge of this than me might think differently.

Yes, you're right. Just intrusion attempts, unsuccessful, so nothing to worry about.

malc-c · 17-08-08, 06:55 PM

Thanks for the heads up on what the log entry means.

Things seem to of been like this since there was an outage which affected quite a few exchanges in this area a few months back. Glad to know the firewall is doing its job

DLM - I hope not ! When I last spoke with CS, they said the line was direct fed from the exchange and of good quality, and should be fine for upto 21MB, so running on the 16MB package would be well within its limits.

I'll keep an eye on it and see if it re-boots at 3am again

Monday · 17-08-08, 08:53 PM

Quote:

Originally Posted by samperry209

highest ive got was 200 hours... but im planning to beat it now my line is sorted!!

do skyresync your line at 4am or something?

Nope.