• March 18, 2024, 10:26:18 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Pages: 1 [2] 3

Author Topic: DIR-865L Weird Internet sessions  (Read 32763 times)

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: DIR-865L Weird Internet sessions
« Reply #15 on: February 25, 2013, 01:37:21 PM »

Keep us posted on how it works out for you.  ;)
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

calculi

  • Level 1 Member
  • *
  • Posts: 13
Re: DIR-865L Weird Internet sessions
« Reply #16 on: February 26, 2013, 10:59:56 PM »

After running firmware 1.04 for just a few days, I can confirm that the "Eplied]" error turned up in the internet sessions again. Not sure what it is. Just one computer. Setup is like before.

TCP   443   46.51.177.110:443   EST   OUT   431954


Whois has started…

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '46.51.128.0 - 46.51.191.255'

inetnum:        46.51.128.0 - 46.51.191.255
netname:        AMAZON-EU-AWS
descr:          Amazon Web Services, Elastic Compute Cloud, EC2, EU
remarks:        The activity you have detected originates from a
remarks:        dynamic hosting environment.
remarks:        For fastest response, please submit abuse reports at
remarks:        http://aws-portal.amazon.com/gp/aws/html-forms-controller/contactus/AWSAbuse
remarks:        For more information regarding EC2 see:
remarks:        http://ec2.amazonaws.com/
remarks:        All reports MUST include:
remarks:        * src IP
remarks:        * dest IP (your IP)
remarks:        * dest port
remarks:        * Accurate date/timestamp and timezone of activity
remarks:        * Intensity/frequency (short log extracts)
remarks:        * Your contact details (phone and email)
remarks:        Without these we will be unable to identify
remarks:        the correct owner of the IP address at that
remarks:        point in time.
country:        IE
admin-c:        ADSI2-RIPE
admin-c:        MA11338-RIPE
tech-c:         AJ176-RIPE
tech-c:         AEA61-RIPE
tech-c:         AENO1-RIPE
status:         ASSIGNED PA
mnt-by:         MNT-ADSI
mnt-domains:    MNT-ADSI
source:         RIPE # Filtered

role:           Amazon Data Services Ireland Technical Role Account
address:        Amazon Data Services Ireland
address:        Digital Depot
address:        Thomas Street
address:        Dublin 8
address:        Ireland
mnt-by:         MNT-ADSI
admin-c:        MA11338-RIPE
tech-c:         AJ176-RIPE
nic-hdl:        ADSI2-RIPE
source:         RIPE # Filtered

role:           Amazon EC2 Abuse
address:        1200 12th Avenue South
                Seattle
                WA
                US
mnt-by:         MNT-ADSI
admin-c:        TW510-RIPE
tech-c:         ADSI2-RIPE
nic-hdl:        AEA61-RIPE
source:         RIPE # Filtered

role:           Amazon EC2 Network Operations
address:        1200 12th Avenue South
                Seattle
                WA
                US
mnt-by:         MNT-ADSI
admin-c:        TW510-RIPE
tech-c:         ADSI2-RIPE
nic-hdl:        AENO1-RIPE
source:         RIPE # Filtered

person:         Alan Judge
address:        Amazon Data Services Ireland
address:        Digital Depot
address:        Thomas Street
address:        Dublin 8
address:        Ireland
phone:          +353 1 645 8937
fax-no:         +353 1 645 8933
nic-hdl:        AJ176-RIPE
source:         RIPE # Filtered

person:         Marla Azinger
address:        One Kilmainham Square
address:        Inchicore Road         Kilmainham
address:        8 Dublin 8
address:        IRELAND
phone:          +35316458950
nic-hdl:        MA11338-RIPE
mnt-by:         MA99006-MNT
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.53 (WHOIS4)

Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: DIR-865L Weird Internet sessions
« Reply #17 on: February 27, 2013, 07:17:41 AM »

Are all devices connected to the router online when this happens?

I would turn off ALL devices accept for one and see where and if this is originating at some places on the LAN side.

Does anyone or you or any device specifically use any Amazon services?
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

Hard Harry

  • Guest
Re: DIR-865L Weird Internet sessions
« Reply #18 on: February 27, 2013, 09:00:52 AM »

Ok, what is the actually problem? Is it just that your seening a log in your internet session you don't understand why it's there? Here is a break down of the different IP's.

198.153.192.40 Symantec. So makes sense that would be in log, since router needs to pass DNS traffic.

208.67.222.222 OpenDNS Again, same thing, if your using OpenDNS, router will talk to that IP

46.51.177.110   :443(HTTPS)
Amazon Elastic Compute Cloud
Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides resizable compute capacity in the cloud. It is designed to make web-scale computing easier for developers.

Common use is app Instagram. So sounds like one of your devices is using Instagram. Likely a Iphone? As for the 'Eplied" thing, best guess is thats either the computer/host name for one of your devices, or there is a glitch when your router looks up the IP for a domain, probably something to do with your 3rd party DNS.

Were there any connections issues?
Logged

calculi

  • Level 1 Member
  • *
  • Posts: 13
Re: DIR-865L Weird Internet sessions
« Reply #19 on: February 28, 2013, 11:35:59 PM »

Ok, what is the actually problem? Is it just that your seening a log in your internet session you don't understand why it's there? Here is a break down of the different IP's.

198.153.192.40 Symantec. So makes sense that would be in log, since router needs to pass DNS traffic.

208.67.222.222 OpenDNS Again, same thing, if your using OpenDNS, router will talk to that IP

46.51.177.110   :443(HTTPS)
Amazon Elastic Compute Cloud
Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides resizable compute capacity in the cloud. It is designed to make web-scale computing easier for developers.

Common use is app Instagram. So sounds like one of your devices is using Instagram. Likely a Iphone? As for the 'Eplied" thing, best guess is thats either the computer/host name for one of your devices, or there is a glitch when your router looks up the IP for a domain, probably something to do with your 3rd party DNS.

Were there any connections issues?


Thanks so much. I think the reason why I asked initially is because the DNS servers are found in the internet sessions as own clickable ips in the internet session table , either that or they are shown as "Eplied]" and not as typical local ip traffic reports: 192.168.0.100 click -> 208.67.222.222:53 , -> 198.153.192.40:53, etc.

I posted example images in the beginning of this thread.

Whenever it happens and I notice it, I get the impression the net is acting up weirdly.

But I feel we are slowly getting closer to the what's causing it. It might be possible that the net is not stable enough. If that is the only reason that the router is acting the way it is then that's fine. I have some radio transmission disturbances over the WiFi which occur on a daily basis and on occasion also some cable-based disturbances. Funny enough I had the WiFi disturbances already when using ADSL modem technology around three years ago when I first moved in here, then I switched to Dir-655 and LAN and got the same disturbances only after a short while. Later on I switched to ASUS RT-N56U using LAN but got similar disturbances over the 5ghz band as of the 2ghz band and also when wired, and now finally the Dir-865L which delivers best. Different technique, different ISP but the problem with similar nature is still there.

I have never seen the internet sessions problem before though.

I have two macbooks and one windows 7 computer. Two ancient Windows Xp computers. Usually only run two mac's and one win7. At the time for these posts I have been plugged in with just my macbook to backtrack things.

When plugging the computer directly to the wall I usually see shared units from time to time if I keep share possiblity open on the computer. Be it shared folders or even shared NAS drives. I even googled one of the units/names of the person and it belonged to a dude living more than 500 metres away in a different house. So that might be indication that the service is open. Possibly this can also explain weird amazon, akamai and other services bouncing on and off from time to time. I've also seen port scans and other weird stuff happening on the net in my logs.

There are rumors in the neighbourhood from some people that there's a WiFi/internet thief running around.



Are all devices connected to the router online when this happens?

I would turn off ALL devices accept for one and see where and if this is originating at some places on the LAN side.

Does anyone or you or any device specifically use any Amazon services?


I do not use instagram and have no iPhone. But there might be a possibility more apps on the mac that are using the Amazon service. I get some hits from their ip's quite often. I'll have to google it and see whatever comes up.

The Windows 7 recently got formatted and cleaned due infection. I even had a friend over who got infected  just after a few hours visit. This happened some month back after years of success at Comodo-using and stable setup firewall rules but apparently not from where I am living now. After cleaning up I pretty much only used the mac computers, but unfortunately it has not changed the status of the weird internet sessions on the router.

« Last Edit: March 01, 2013, 12:22:33 AM by calculi »
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: DIR-865L Weird Internet sessions
« Reply #20 on: March 01, 2013, 06:51:35 AM »

Do you still have the older router? Might be worth checking either with the older router or possibly get a different DIR series router if you have a store that has a refund policy, check either one of these different router for the same condition and see if they exhibit this. It would be a good test to try this router at a different location as well. Friend or families place.

This seems central to your location as other in other areas have not reported anything like this. I'll put my 865L back online this weekend and check for this as sometimes I do use amazon to download music on my Mac.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

calculi

  • Level 1 Member
  • *
  • Posts: 13
Re: DIR-865L Weird Internet sessions
« Reply #21 on: March 01, 2013, 10:48:13 AM »

Do you still have the older router? Might be worth checking either with the older router or possibly get a different DIR series router if you have a store that has a refund policy, check either one of these different router for the same condition and see if they exhibit this. It would be a good test to try this router at a different location as well. Friend or families place.

This seems central to your location as other in other areas have not reported anything like this. I'll put my 865L back online this weekend and check for this as sometimes I do use amazon to download music on my Mac.

Thanks for all the help. Using the old Dir-655 I get other troubles on my net. Usually I have to apply a new administrator password and also change bssid and password on a regular basis orelse it chokes on me.

The Best option would be to try the router at some other place to see if it handles massive data/random data transfer for a while and if the bug occurs.
Logged

calculi

  • Level 1 Member
  • *
  • Posts: 13
Re: DIR-865L Weird Internet sessions
« Reply #22 on: March 01, 2013, 10:49:44 AM »

Thanks for all the help. Using the old Dir-655 I get other troubles on my net. Usually I have to apply a new administrator password and also change bssid and password on a regular basis orelse it chokes on me. The Asus router is dead. Not sure what ever happened to it.

The Best option would be to try the router at some other place to see if it handles massive data/random data transfer for a while and if the bug occurs. I'll check that as soon as possible.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: DIR-865L Weird Internet sessions
« Reply #23 on: March 01, 2013, 10:53:08 AM »

If you want, maybe someone can review your DIR-655 router settings with you and see if maybe we can help you get the 655 running as a back up router for you using teamviewer if your interested. Its safe and secure.

Keep us posted.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

calculi

  • Level 1 Member
  • *
  • Posts: 13
Re: DIR-865L Weird Internet sessions
« Reply #24 on: March 01, 2013, 11:27:15 AM »

If you want, maybe someone can review your DIR-655 router settings with you and see if maybe we can help you get the 655 running as a back up router for you using teamviewer if your interested. Its safe and secure.

Keep us posted.

Thanks for the offer. I think I'll begin to check what ever might be up with the 865L router and take the rest  from there. I got people coming over here to check the net also.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: DIR-865L Weird Internet sessions
« Reply #25 on: March 01, 2013, 11:37:29 AM »

 ;) Hope it works out for you. Let us know how it goes.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

calculi

  • Level 1 Member
  • *
  • Posts: 13
Re: DIR-865L Weird Internet sessions
« Reply #26 on: April 21, 2013, 12:14:36 AM »

Ok. so far I wish I could give some good news, but the problem maintained.

* I reset the router multiple times
* Tried dhcp/static ip's
* Tried NAT on/off
* Tried different access control rules and other stuff. Just to see what was passed or not.
* Tried the router at other locations.

No luck.

According to wifi explorer/analyzer programs I used, I noticed that the router switched from ad-hoc/on/off throughout the days. Never seen such a thing before. As if it switched between bridged mode on/off. No idea as it only seemed to affect my net by getting slower rather than by throwing me in and out of the router connection from time to time. That happened too of course.

Also noticed other users with same mac address and got some weird ip-conflicts from time to time. Also noticed that the weird "eplied" just kept going and going (the original reason for posting here)

Not sure if all this is related I took it up with the ISP.

My ISP told me that apparently there had been some kind of intrusion attempts but that they couldn't help me further unless I got the router checked...

Because of that I have decided to put it back in the box and am now running a different brand.
« Last Edit: April 21, 2013, 12:45:12 AM by calculi »
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: DIR-865L Weird Internet sessions
« Reply #27 on: April 21, 2013, 09:05:13 AM »

I recommend that you send you unit back to DLink and get into RMA. I have not seen this issue here nor has anyone else. Seems like there could be an issue with the router.

Keep us posted on the results and good luck.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

fcadena

  • Level 1 Member
  • *
  • Posts: 1
Re: DIR-865L Weird Internet sessions
« Reply #28 on: June 13, 2013, 07:10:59 AM »

Calculli, I have a DIR-645 and I started seeing this strange entry in my list once I enabled an IP in the DMZ zone. If you expand the details for that strange name (which does not match any of my network hostnames) it points to my DMZ IP.

I moved my DMZ IP to a different IP and sure enough, now it is using the new DMZ IP.

Not really sure if this are really related or not but that has been my personal experience with that Internet session name.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: DIR-865L Weird Internet sessions
« Reply #29 on: June 13, 2013, 07:14:39 AM »

Link>Welcome!
  • What Hardware version is your router? Look at sticker under router.
  • Link>What Firmware version is currently loaded? Found on routers web page under status.
  • What region are you located?

Thank you for sharing your experiences, interesting this appears on the 645 when using DMZ. I'll give this a try and see if I see the same thing.

Calculli, I have a DIR-645 and I started seeing this strange entry in my list once I enabled an IP in the DMZ zone. If you expand the details for that strange name (which does not match any of my network hostnames) it points to my DMZ IP.

I moved my DMZ IP to a different IP and sure enough, now it is using the new DMZ IP.

Not really sure if this are really related or not but that has been my personal experience with that Internet session name.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.
Pages: 1 [2] 3