D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-600L => Topic started by: nikhil92 on September 23, 2014, 04:03:30 AM

Title: what is this every second more than 3 packets drop
Post by: nikhil92 on September 23, 2014, 04:03:30 AM
please help me

I am using Dlink 600L B1 2.04

i am facing problem
lots of packets are droping
my internet is working like s*** because of this

(http://i62.tinypic.com/1trbwp.png)

now when i use router this happen but when i connect dircet cable connection my net nic or we can say work properly

i am using windows 8
isp cable connection (PPPoE) 1mb upload/download
Location india,mumbai
Factory Reset been performed many times
i uploaded  FW 2.04 again but same thing

Automatic Ip and Dns
connection allwys on

tried with firwall on and off same thing
tried with new ssid name

tried with different channels 6 or 11

i think i give you almost all info plz try to help me what shoud i do now
Title: Re: what is this every second more than 3 packets drop
Post by: FurryNutz on September 23, 2014, 07:02:27 AM
Link>Welcome! (http://forums.dlink.com/index.php?topic=48135.0)

FW Update Process (http://forums.dlink.com/index.php?topic=42457.0)

Internet Service Provider and Modem Configurations

Looks like the SPI FW is doing its job since the router is detecting attacks. I recommend that you contact your ISP and ask them for help and information regarding this...See if they can help you block those IP addresses who's attacking you. Ask them to change the pubic IP address that gets handed to your ISP modem.
Title: Re: what is this every second more than 3 packets drop
Post by: nikhil92 on September 23, 2014, 07:14:58 AM
those ip are not attacks
when i try to downloades it started dropening packets
when i try to play online games is droping packets and ping increases
these ip are not any paticuler range
ip from all over the world

its 100% not attacks

i called isp they said try with router and its working fine without router
every time it showing new ip so how could they block

even when website lodaeds it drop packes and website not geting opens


 Firmware is downloaed using or it found in support.dlink.com
i Checked cable between Modem and Router is ok tried swap and also using cat6 cable

Was the router working before any firmware updates?
answer is
router is working but its droping my more than 50% of bandwidth
Title: Re: what is this every second more than 3 packets drop
Post by: FurryNutz on September 23, 2014, 07:17:55 AM
With the ISP MODEM line disconnected from the router, do you still see log entries like this?

You might do a scan with Malware-Bytes to see if you have any malware on your PC...do all devcies connect do this?

What ISP Modem Mfr. and model # do you have?
Check cable between Modem and Router, swap out to be sure. Link> Cat6 is recommended.
Check ISP MTU requirements, Cable is usually 1500, DSL is around 1492 down to 1472. Call the ISP and ask. Link>Checking MTU Values
Title: Re: what is this every second more than 3 packets drop
Post by: nikhil92 on September 23, 2014, 07:47:14 AM
no then no such  ISP MODEM ISP dissconnecting

when its only lan no internet
(http://i58.tinypic.com/2je1nqq.png)

see how much packets are droping

i dont know about What ISP Modem Mfr. and model # do you have?
i will give this info tomoro

and thanks for helping
i will scan my pc again
i have macfee antiviues genuin
Title: Re: what is this every second more than 3 packets drop
Post by: FurryNutz on September 23, 2014, 08:12:51 AM


Router Placement
Forum User - "Well I feel really dumb. After moving the router away from other electronic devices my speeds are back to normal. Just a heads up for anyone experiencing slow speeds, you might want to move it away from other electronics and see if that helps."
3-6' feet minimum safe distance between devices.
Placement on main level floor and central in the building and WELL ventilated is preferred. Not in basements or closets as building materials, or near by electronics devices could interfere or hinder good signal propagation.
Title: Re: what is this every second more than 3 packets drop
Post by: nikhil92 on September 24, 2014, 10:17:02 AM

there is no other wifi or any other router
checked using inssider

my router is far away from electronic devices

plz help me before this my ping was 100-200 in game but because of this packet drops it 450+ i cant play online games to much lag

i try using different windos os same thing
i try using different machine my laptop,computer and my android phone
same its drop lots of packets

did i need to stop firewall my router
Title: Re: what is this every second more than 3 packets drop
Post by: FurryNutz on September 24, 2014, 10:32:30 AM
Lets try this:
There is v2.05 located here:
http://tsd.dlink.com.tw/downloads2008.asp (http://tsd.dlink.com.tw/downloads2008.asp)
Select DIR then 600L from the drop down menus.
Download the .bin file to the desk top.

Disable all other devices, turn them off.

Factory reset the router with all other devices disconnected or turned OFF accept for 1 LAN cable wired PC. DO NOT USE WIRELESS!! Disable any PC security SW and browser add-ons.

Update the FW using IE or FF. Just download the FW file to your local wired LAN PC.

After the file was processed and the router is back to ready, factory reset the router and then set up from scratch.

Test and see if the problem still happens...
Title: Re: what is this every second more than 3 packets drop
Post by: nikhil92 on September 24, 2014, 10:40:32 AM
guys using pingtest net
firewall or Anti-Spoof checking Enable is on or off
its showing packet loss test failed
Title: Re: what is this every second more than 3 packets drop
Post by: FurryNutz on September 24, 2014, 10:43:16 AM
let us know if you see same thing after update...
Title: Re: what is this every second more than 3 packets drop
Post by: nikhil92 on September 24, 2014, 11:10:11 AM
Updated the FW 2.04 to 2.05 using IE
using only pc no other wireless device

its same result packets are droping

is there any application to check router performance

and thank you sir for giving me latest FW and your valuble replys
Title: Re: what is this every second more than 3 packets drop
Post by: FurryNutz on September 24, 2014, 11:16:16 AM
I think you need to contact your regional D-Link support office. Your unit maybe faulty. Ask for level 2 or higher support and for a RMA request.

Let us know how it goes...
Title: Re: what is this every second more than 3 packets drop
Post by: nikhil92 on September 27, 2014, 02:29:10 AM
now i need help to much

now many websites are not opening but when i connect direct through cable they opens but using router many site not opening

where i find out regional D-Link support office
Title: Re: what is this every second more than 3 packets drop
Post by: PacketTracer on September 27, 2014, 05:49:35 AM
Why are you so sure that it is not a DOS or DDOS attack? Just because performance is good when plugging a PC directly to your modem? This may be due to the pure fact that the PC isn't logging the packets that its host firewall drops (which is the default for a Windows PC for example).

Hence I suggest you plug your PC directly to your modem and activate logging of packet drops of the host firewall. With Windows 7 you can do this within the advanced firewall settings where you can activate logging for the active profile in use (should be "public"). If so the predefined logging file is %systemroot%\system32\LogFiles\Firewall\pfirewall.log. Windows 8 should be similar.

Can you show us the contents of your host firewall log file "pfirewall.log" containing all dropped packets?

PT
Title: Re: what is this every second more than 3 packets drop
Post by: nikhil92 on September 27, 2014, 06:20:44 AM
okkk

but some will help me now plz

today i go to dlink service center and give them router
tell them my problem
they say device is ok

and they uploaded tp-link fw this is s*** and its not connecting to net
at home i cant upload dlink fw

it gives me error now tomaro is holiday sunday
now i just want to cry for this to much furested from dlink service center
wtf wtf my life is s***

you guys want to see tp -link fw?
plz give me solution this is a week now i didnt use my net on device
Title: Re: what is this every second more than 3 packets drop
Post by: PacketTracer on September 27, 2014, 06:31:06 AM
Hi,

if you do what I asked you for this could help to figure out, if your Internet access suffers from DOS attacks (pfirewall.log would show this the same way, your router log does) or if you really have a router problem.

PT
Title: Re: what is this every second more than 3 packets drop
Post by: nikhil92 on September 27, 2014, 06:41:06 AM
ya i will do that but 1st help me to change fw

i cant able to change it
Title: Re: what is this every second more than 3 packets drop
Post by: PacketTracer on September 27, 2014, 07:12:22 AM
Hi,

look here (http://windowsitpro.com/windows/q-how-can-i-generate-windows-firewall-packet-log-shows-all-incoming-network-packets-are-allo) for background information.

The easiest way is to open a Windows Command Prompt (important: right click the Icon for Command prompt and select "Run as administrator") and enter the following command:

Code: [Select]
netsh advfirewall set allprofiles logging droppedconnections enable
Connect your Windows 8 PC to your modem. Wait a few minutes while surfing in the Internet.

Dropped packets will be logged in the file C:\Windows\System32\LogFiles\Firewall\pfirewall.log. If you are not allowed, to open it, just copy it to the desktop or somewhere else and open the copied file.

Stop logging by entering the following command in  a command prompt you started with administrative rights:

Code: [Select]
netsh advfirewall set allprofiles logging droppedconnections disable
Post the contents of your pfirewall.log here for inspection.

PT
Title: Re: what is this every second more than 3 packets drop
Post by: nikhil92 on September 27, 2014, 07:54:44 AM
#Version: 1.5
#Software: Microsoft Windows Firewall
#Time Format: Local
#Fields: date time action protocol src-ip dst-ip src-port dst-port size tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info path

2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 287 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 296 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 359 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 355 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 335 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 367 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 349 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 287 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 296 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 359 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 355 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 335 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 367 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 349 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 288 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 297 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 360 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 356 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 336 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 368 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 350 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 288 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 297 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 360 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 356 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 336 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 368 - - - - - - - RECEIVE
2014-09-27 20:06:23 DROP UDP 192.168.0.1 239.255.255.250 1159 1900 350 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 287 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 296 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 359 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 355 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 335 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 367 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 349 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 287 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 296 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 359 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 355 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 335 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 367 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 349 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 288 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 297 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 360 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 356 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 336 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 368 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 350 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 288 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 297 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 360 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 356 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 336 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 368 - - - - - - - RECEIVE
2014-09-27 20:15:23 DROP UDP 192.168.0.1 239.255.255.250 1239 1900 350 - - - - - - - RECEIVE

see  this with router

now i will try without router
Title: Re: what is this every second more than 3 packets drop
Post by: PacketTracer on September 27, 2014, 08:34:26 AM
Hi,

nothing exciting, it's just your router advertising its services via multicasts using SSDP (http://en.wikipedia.org/wiki/Simple_Service_Discovery_Protocol) protocol. Just a hint: For longer output use the ...

Code: [Select]
... "Insert Code" edit function "#", which includes a scrolling feature.
PT
Title: Re: what is this every second more than 3 packets drop
Post by: nikhil92 on September 28, 2014, 02:13:38 AM
hi i didnt get it
Title: Re: what is this every second more than 3 packets drop
Post by: PacketTracer on September 28, 2014, 06:32:03 AM
Hi,

Quote
hi i didnt get it
--> some more details might be helpful.

Looking at your very first post, I used 'whois' to analyze, where the addresses belong to. If not spoofed, the four addresses seen in the log all belong to ISPs of your region:


Hence, addresses might belong to customer devices that may be part of a botnet used for DDOS attacks.

Here (http://security.stackexchange.com/questions/53765/router-detecting-port-scan-and-ack-flood-attack) is another guy having a problem that looks quite similar to your's.

PT
Title: Re: what is this every second more than 3 packets drop
Post by: FurryNutz on October 20, 2014, 09:20:20 AM
Any status on this?  ???

please help me

I am using Dlink 600L B1 2.04

i am facing problem
lots of packets are droping
my internet is working like **** because of this

(http://i62.tinypic.com/1trbwp.png)

now when i use router this happen but when i connect dircet cable connection my net nic or we can say work properly

i am using windows 8
isp cable connection (PPPoE) 1mb upload/download
Location india,mumbai
Factory Reset been performed many times
i uploaded  FW 2.04 again but same thing

Automatic Ip and Dns
connection allwys on

tried with firwall on and off same thing
tried with new ssid name

tried with different channels 6 or 11

i think i give you almost all info plz try to help me what shoud i do now
Title: Re: what is this every second more than 3 packets drop
Post by: PacketTracer on November 13, 2014, 12:36:49 PM
Hi nikhil92,

not sure if you are still interested, ....

Quote
when i try to play online games is droping packets and ping increases

Last week I attended an IT meeting, where another participant, working in computer game industry, reported that DDOS attacks are weapons used by unfair gamers to thwart concurrent gamers.

Title: Re: what is this every second more than 3 packets drop
Post by: FurryNutz on November 13, 2014, 12:47:06 PM
Interesting that you note that. Often wondered what does on when gaming and lag and such is experienced. I presume attackers do pose a threat.  :-\

Hi nikhil92,

not sure if you are still interested, ....

Quote
when i try to play online games is droping packets and ping increases

Last week I attended an IT meeting, where another participant, working in computer game industry, reported that DDOS attacks are weapons used by unfair gamers to thwart concurrent gamers.