sys log - weird activities

The Graveyard - Products No Longer Supported > DIR-810L

(1/3) > >>

Sherlock832:
Hi all. I have some strange activity i believe with my router and feel that something is out of the norm. If someone can, please view and let me know.

Dec 31 19:00:27 dlinkrouter syslog.info syslogd started: BusyBox v1.12.1
Dec 31 19:00:27 dlinkrouter user.info Wireless[6039]: WPS polling daemon start
Dec 31 19:00:43 dlinkrouter user.info ncc[122]: [ltSystemActivity]Boot Complate!!
Dec 31 19:00:43 dlinkrouter user.info Wireless[119]: ac:a2:13:cf:a1:5c new Client is connected to network
Dec 31 19:00:46 dlinkrouter user.info Wireless[119]: c0:d0:12:8c:59:18 new Client is connected to network
Dec 31 19:00:46 dlinkrouter user.info Wireless[119]: c0:bd:d1:f0:b5:ed new Client is connected to network
Dec 31 19:00:46 dlinkrouter user.info ncc[122]: [ltSystemActivity]Connect DHCP Server Success, Current Wan IP address: 173.238.32.59
Dec 31 19:00:24 dlinkrouter daemon.info dnsmasq[4343]: started, version 2.41 cachesize 150
Dec 31 19:00:47 dlinkrouter daemon.warn dnsmasq[4343]: overflow: 6 log entries lost
Dec 31 19:00:47 dlinkrouter daemon.info dnsmasq[4343]: using nameserver 24.226.1.93#53
Dec 31 19:00:47 dlinkrouter daemon.info dnsmasq[4343]: using nameserver 24.226.1.94#53
Dec 31 19:00:47 dlinkrouter daemon.info dnsmasq[4343]: using nameserver 24.226.10.194#53
Dec 31 19:00:47 dlinkrouter daemon.info dnsmasq[4343]: using nameserver 24.226.10.193#53
May 27 17:33:49 dlinkrouter user.debug ncc[148]: [ltDebugInformation]System time synchronized with NTP server.
May 27 17:33:50 dlinkrouter user.debug ncc[148]: [ltDebugInformation]System time synchronized with NTP server.
May 27 17:33:51 dlinkrouter user.debug ncc[148]: [ltDebugInformation]System time synchronized with NTP server.
May 27 17:33:52 dlinkrouter user.notice ncc[148]: [ltNotice]c0:d0:12:8c:59:18(192.168.0.101) join Lan Network

May 28 06:03:55 dlinkrouter user.debug syslog: copy_option: set elapsed time (len 2)
May 28 06:03:55 dlinkrouter user.debug syslog: copy_option: set option request (len 8)
May 28 06:03:55 dlinkrouter user.debug syslog: copyout_option: set IA_PD prefix
May 28 06:03:55 dlinkrouter user.debug syslog: copyout_option: set IA_PD
May 28 06:03:55 dlinkrouter user.debug syslog: copy_option: set opt_20 (len 0)
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option client ID, len 10
May 28 06:03:55 dlinkrouter user.debug syslog: DUID: 00:03:00:01:c0:a0:bb:e5:81:eb
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option server ID, len 14
May 28 06:03:55 dlinkrouter user.debug syslog: DUID: 00:01:00:01:20:5d:66:70:00:50:56:a4:da:d0
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option identity association, len 40
May 28 06:03:55 dlinkrouter user.debug syslog: IA_NA: ID=185487489, T1=21600, T2=34560
May 28 06:03:55 dlinkrouter user.debug syslog: copyin_option: get DHCP option IA address, len 24
May 28 06:03:55 dlinkrouter user.debug syslog: copyin_option: IA_NA address: 2001:1970:4000:d4:1f8:1ab:6962:3e05 pltime=43200 vltime=86400
May 28 06:03:55 dlinkrouter user.info syslog: copyin_option: send IA_NA address to ncc2001:1970:4000:d4:1f8:1ab:6962:3e05 pltime=43200 vltime=86400
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option opt_20, len 0
May 28 06:03:55 dlinkrouter user.info syslog: dhcp6_get_options: unknown or unexpected DHCP6 option opt_20, len 0
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option authentication, len 28
May 28 06:03:55 dlinkrouter user.debug syslog: proto: reconfig, alg: HMAC-MD5, RDM: mono counter, RD: 9094 e52a 20b2 4200
May 28 06:03:55 dlinkrouter user.debug syslog: reconfig type: 1, offset: 96
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option DNS, len 64
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option domain search list, len 14
May 28 06:03:55 dlinkrouter user.debug syslog: get_ia: update an IA: NA-185487489
May 28 06:03:55 dlinkrouter user.debug syslog: update_address: update an address 2001:1970:4000:d4:1f8:1ab:6962:3e05 pltime=43200, vltime=86400
May 28 06:03:55 dlinkrouter user.debug syslog: client6_script: script "/bin/dhcp6c-script" terminated
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_remove_event: removing an event on eth2.2, state=RENEW
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option client ID, len 10
May 28 06:03:55 dlinkrouter user.debug syslog: DUID: 00:03:00:01:c0:a0:bb:e5:81:eb
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option server ID, len 14
May 28 06:03:55 dlinkrouter user.debug syslog: DUID: 00:01:00:01:20:5d:66:70:00:50:56:a4:da:d0
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option IA_PD, len 41
May 28 06:03:55 dlinkrouter user.debug syslog: IA_PD: ID=185487489, T1=21600, T2=34560
May 28 06:03:55 dlinkrouter user.debug syslog: copyin_option: get DHCP option IA_PD prefix, len 25
May 28 06:03:55 dlinkrouter user.debug syslog: copyin_option: IA_PD prefix: 2001:1970:5ca0:4900::/56 pltime=43200 vltime=86400
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option opt_20, len 0
May 28 06:03:55 dlinkrouter user.info syslog: dhcp6_get_options: unknown or unexpected DHCP6 option opt_20, len 0
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option authentication, len 28
May 28 06:03:55 dlinkrouter user.debug syslog: proto: reconfig, alg: HMAC-MD5, RDM: mono counter, RD: 0800 0000 20b2 4200
May 28 06:03:55 dlinkrouter user.debug syslog: reconfig type: 1, offset: 97
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option DNS, len 64
May 28 06:03:55 dlinkrouter user.debug syslog: dhcp6_get_options: get DHCP option domain search list, len 14
May 28 06:03:55 dlinkrouter user.debug syslog: get_ia: update an IA: PD-185487489
May 28 06:03:55 dlinkrouter user.debug syslog: update_prefix: update a prefix 2001:1970:5ca0:4900::/56 pltime=43200, vltime=86400
May 28 06:03:56 dlinkrouter user.debug syslog: client6_script: script "/bin/dhcp6c-script" terminated
May 28 06:03:56 dlinkrouter user.debug syslog: dhcp6_remove_event: removing an event on eth2.2, state=RENEW
May 28 06:12:43 dlinkrouter user.info Wireless[119]: 98:5f:d3:18:53:cb client had deauthenticated and disconnected
May 28 06:12:46 dlinkrouter user.info Wireless[119]: 98:5f:d3:18:53:cb client had deauthenticated and disconnected
May 28 06:12:49 dlinkrouter user.info Wireless[119]: 98:5f:d3:18:53:cb client had deauthenticated and disconnected
May 28 08:13:23 dlinkrouter user.info Wireless[119]: 98:5f:d3:18:53:cb client had deauthenticated and disconnected
May 28 08:13:25 dlinkrouter user.info Wireless[119]: 98:5f:d3:18:53:cb client had deauthenticated and disconnected
May 28 08:13:26 dlinkrouter user.info Wireless[119]: 98:5f:d3:18:53:cb client had deauthenticated and disconnected
May 28 08:13:29 dlinkrouter user.info Wireless[119]: 98:5f:d3:18:53:cb client had deauthenticated and disconnected
May 28 08:13:32 dlinkrouter user.info Wireless[119]: 98:5f:d3:18:53:cb client had deauthenticated and disconnected

Hard Harry:
What looks abnormal to you?

Hard Harry:
The only thing that looks out of the norm to me is the router is having trouble with IPv6. If you don't use it, disable it. If you do, how is it configured? Also might want to check this link from DSLR about Cogeco IPv6.

FurryNutz:
Link>Welcome!

* What Hardware version is your router? Look at sticker under the router case.
* Link>What Firmware version is currently loaded? Found on the routers web page under status.
* What region are you located?
Internet Service Provider and Modem Configurations

* What ISP Service do you have? Cable or DSL?
* What ISP Modem Mfr. and model # do you have?

--- Quote from: Sherlock832 on May 28, 2017, 08:29:55 AM ---Hi all. I have some strange activity i believe with my router and feel that something is out of the norm. If someone can, please view and let me know.

Dec 31 19:00:27 dlinkrouter syslog.info syslogd started: BusyBox v1.12.1
Dec 31 19:00:27 dlinkrouter user.info Wireless[6039]: WPS polling daemon start
Dec 31 19:00:43 dlinkrouter user.info ncc[122]: [ltSystemActivity]Boot Complate!!
Dec 31 19:00:43 dlinkrouter user.info Wireless[119]: ac:a2:13:cf:a1:5c new Client is connected to network
Dec 31 19:00:46 dlinkrouter user.info Wireless[119]: c0:d0:12:8c:59:18 new Client is connected to network
Dec 31 19:00:46 dlinkrouter user.info Wireless[119]: c0:bd:d1:f0:b5:ed new Client is connected to network
Dec 31 19:00:46 dlinkrouter user.info ncc[122]: [ltSystemActivity]Connect DHCP Server Success, Current Wan IP address: 173.238.32.59
Dec 31 19:00:24 dlinkrouter daemon.info dnsmasq[4343]: started, version 2.41 cachesize 150
Dec 31 19:00:47 dlinkrouter daemon.warn dnsmasq[4343]: overflow: 6 log entries lost
Dec 31 19:00:47 dlinkrouter daemon.info dnsmasq[4343]: using nameserver 24.226.1.93#53
Dec 31 19:00:47 dlinkrouter daemon.info dnsmasq[4343]: using nameserver 24.226.1.94#53
Dec 31 19:00:47 dlinkrouter daemon.info dnsmasq[4343]: using nameserver 24.226.10.194#53
Dec 31 19:00:47 dlinkrouter daemon.info dnsmasq[4343]: using nameserver 24.226.10.193#53
May 27 17:33:49 dlinkrouter user.debug ncc[148]: [ltDebugInformation]System time synchronized with NTP server.
May 27 17:33:50 dlinkrouter user.debug ncc[148]: [ltDebugInformation]System time synchronized with NTP server.
May 27 17:33:51 dlinkrouter user.debug ncc[148]: [ltDebugInformation]System time synchronized with NTP server.
May 27 17:33:52 dlinkrouter user.notice ncc[148]: [ltNotice]c0:d0:12:8c:59:18(192.168.0.101) join Lan Network

--- End quote ---

Sherlock832:
Well all the activity early in the morning. 0600 plus.

Navigation

[0] Message Index

[#] Next page

Go to full version