Your forum username:
Do you already have an account?
Forgot your password?
  • Log in or Sign up


    Welcome to Sky User - The Unofficial Support Forum for everything Sky! - Proudly helping over 65k members.


    Advertisement

    Results 1 to 7 of 7

    Sagem F@st 2504n Intrusion and Ethernet Down Logs

    This is a discussion on Sagem F@st 2504n Intrusion and Ethernet Down Logs within the Sky Router forums, part of the Sky Broadband help category; I have been trying to do a backup of my laptop onto a NAS drive but I keep getting a ...

    1. #1
      Barney1963's Avatar
      Barney1963 is offline Sky User Member
      Exchange:
      Broadband ISP: Sky Broadband Unlimited
      Router: Sagem F@ST 2504n
      Sky TV: Sky Basic
      Join Date
      Feb 2014
      Posts
      1
      Thanks
      0
      Thanked 0 Times in 0 Posts

      Sagem F@st 2504n Intrusion and Ethernet Down Logs

      I have been trying to do a backup of my laptop onto a NAS drive but I keep getting a write error 30-45 minutes in.
      I thought I would look at the router log to see if that might show some light on the problem.
      I was amazed to find the amount of alerts in the log, listed below:-
      Feb 4 23:24:55 (none) user.alert kernel: Intrusion -> IN=pppoa0 OUT= MAC= SRC=178.19.107.26 DST=90.216.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=35701 DF PROTO=TCP SPT=45751 DPT=9000 WINDOW=29200 RES=0x00 SYN URGP=0 MARK=0x8000000
      The 90.216.xxx.xxx is my current IP address.
      The SRC IP is the same on a lot of the logs (sequential) but does change, ie there may be 50 at one IP then it changes to 55 at another, then 67 at another etc.
      My son plays a lot on XBox Live, is this anything to do with it?
      This log is showing up every 3-5 minutes or so. What is it?
      and
      Feb 4 22:56:31 (none) user.crit kernel: eth3 Link DOWN.
      Feb 4 22:56:33 (none) user.crit kernel: eth3 Link UP 100 mbps full duplex
      Feb 4 22:56:34 (none) user.crit kernel: eth3 Link DOWN.
      Feb 4 22:56:35 (none) user.crit kernel: eth3 Link UP 100 mbps full duplex
      That seems to coincide with when the backup fails, the NAS is on Eth port 3.
      Is it the router terminating the connection or the NAS?

      Barney


    2. Advertisement
    3. #2
      Isitme's Avatar
      Isitme is offline Sky User Moderator
      Exchange: Bannockburn
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR102
      Sky TV: Sky+ HD
      Join Date
      Dec 2006
      Location
      Central Scotland
      Posts
      34,256
      Thanks
      65
      Thanked 1,655 Times in 1,616 Posts

      Re: Sagem F@st 2504n Intrusion and Ethernet Down Logs

      These sort of entries a quite common, especially with a gamer in the house.

      The eth3 link down indicates the NAS is loosing connection to the router. This is probably caused by the plug into the NAS or router working loose, or a fault with the cable. Try replacing the cable and see if that helps.

      TomD


      Please note the views and recommendations in my posts are my own and in no way reflect the views of SkyUser.


      Useful Utilites

      https://www.nirsoft.net/utils/wifi_information_view.html/ TCPOptimiser /Test Socket

      Note - When downloading always select the Custom install or you will end up with stuff you don't want.





    4. #3
      gymno's Avatar
      gymno Guest
      Exchange:
      Broadband ISP:
      Router:
      Sky TV:

      Re: Sagem F@st 2504n Intrusion and Ethernet Down Logs

      The logs in my 2504n show eth0 Link DOWN when the sky box shuts down in eco mode at 3am.
      That's plugged into ethernet port 1.

      Likewise, when i put the PS3 into standby the logs show eth1 Link DOWN.
      That's plugged into ethernet port 2.

      So it may not be the nas dropping connection, but whatever's occupying port 4.

    5. #4
      Isitme's Avatar
      Isitme is offline Sky User Moderator
      Exchange: Bannockburn
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR102
      Sky TV: Sky+ HD
      Join Date
      Dec 2006
      Location
      Central Scotland
      Posts
      34,256
      Thanks
      65
      Thanked 1,655 Times in 1,616 Posts

      Re: Sagem F@st 2504n Intrusion and Ethernet Down Logs

      Quote Originally Posted by gymno View Post
      ...................

      So it may not be the nas dropping connection, but whatever's occupying port 4.
      But he does say "the NAS is on Eth port 3." which is port #4

      eth0 = Port#1
      eth1 = Port#2
      eth2 = Port#3
      eth3 = Port#4

      TomD


      Please note the views and recommendations in my posts are my own and in no way reflect the views of SkyUser.


      Useful Utilites

      https://www.nirsoft.net/utils/wifi_information_view.html/ TCPOptimiser /Test Socket

      Note - When downloading always select the Custom install or you will end up with stuff you don't want.





    6. #5
      gymno's Avatar
      gymno Guest
      Exchange:
      Broadband ISP:
      Router:
      Sky TV:

      Re: Sagem F@st 2504n Intrusion and Ethernet Down Logs

      I know, but if he means that the nas is connected to port #3 on the rear, 'eth3 Link Down' in the logs won't be the nas dropping connection.
      Thought it might be worth mentioning just in case.

      Incidentally, is there a reason why they've done that or was it a mistake?
      The ports on the back aren't actually numbered but the lights on the front are 1-4, corresponding with top to bottom on the rear.

    7. #6
      Isitme's Avatar
      Isitme is offline Sky User Moderator
      Exchange: Bannockburn
      Broadband ISP: Sky Fibre Unlimited
      Router: Sky Hub SR102
      Sky TV: Sky+ HD
      Join Date
      Dec 2006
      Location
      Central Scotland
      Posts
      34,256
      Thanks
      65
      Thanked 1,655 Times in 1,616 Posts

      Re: Sagem F@st 2504n Intrusion and Ethernet Down Logs

      Its a thing with Linux. The first ethernet port is always classed as eth0, the second as eth1 and so on. It would not be logical to have a port 0 so the external ports are always numbered Port 1, Port 2 etc. Whether they are numbered from the top or bottom does not really matter and could vary with different routers, but eth0 will always connect to Port 1.

      TomD


      Please note the views and recommendations in my posts are my own and in no way reflect the views of SkyUser.


      Useful Utilites

      https://www.nirsoft.net/utils/wifi_information_view.html/ TCPOptimiser /Test Socket

      Note - When downloading always select the Custom install or you will end up with stuff you don't want.





    8. #7
      gymno's Avatar
      gymno Guest
      Exchange:
      Broadband ISP:
      Router:
      Sky TV:

      Re: Sagem F@st 2504n Intrusion and Ethernet Down Logs

      If it's called eth0 in the logs then i'd say it would be logical to have a port 0.
      Perhaps i'm not very logical.

      BTW, Barney1963.
      My logs are choc-full of those kind of intrusions too.
      Looking up the ip addresses (after the src bit) in the past revealed them to be from all over eastern europe.
      I've always chosen to ignore them.

      I do play a lot of PS3, but the intrusions are just as frequent during the periods when i'm not.
      Turning off 'respond to ping on internet WAN port' doesn't affect the quantity, but if the PS3 is in the routers DMZ, they all but disappear & just 1 or 2 per week get logged.
      Last edited by gymno; 07-02-14 at 05:04 PM.

     

     

    Tags for this Thread

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •  
    SkyUser - Copyright © 2006-2020. SatDish and NewsreadeR | SkyUser is in no way affiliated with Sky Broadband / BSkyB
    RIPA NOTICE: NO CONSENT IS GIVEN FOR INTERCEPTION OF PAGE TRANSMISSION