D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-685 => Topic started by: johsm67 on January 28, 2010, 03:32:15 PM

Title: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."
Post by: johsm67 on January 28, 2010, 03:32:15 PM

My DIR-685 is logging some strange messages!

ATTACK Detected: 001[Xmas] attack from WAN (ip:x.x.x.x) detected. Packet dropped

If i analyse the IP's in use it's all coming randomly from known services such as Apple, MSN, My Mailserers i'm using! I suspect the DIR-685 is logging wrong or is dropping "legal" packages based on the source IP's
As it's only from systems that i do access!

Is it a bug in the firmware? Any one else seen it?

/Johan

Title: Re: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."
Post by: morphy on January 29, 2010, 11:48:11 AM

Yes I have had a few of them. M

Title: Re: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."
Post by: jkanters on February 06, 2010, 02:27:42 AM

I have them too, but I havent felt that they bother relevant communication

Title: Re: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."
Post by: Spoonman2112 on February 06, 2010, 09:12:43 AM

Yeah, I've seen a couple of those, but haven't had any problems with connectivity.

Title: Re: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."
Post by: weeyung on February 17, 2012, 09:02:34 AM

I met this too, it interrupted my internet connectivity.. what is that actually? Somebody hack it? does this happen to DIR-685 only?

Title: Re: Logging wrong stuff! "ATTACK Detected: 001[Xmas] attack from WAN..."
Post by: FurryNutz on February 21, 2012, 07:36:36 AM

Being that it's been a while since anyone reported any results on this, I would presume this is a isolated incident with traffic coming into the router and the router reporting that it blocked the offending data packets and is working as designed.  I would call your ISP and ask them if there is any information on this and if they can help block it if it seems to become a problem.