Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[kwhombre]

New router and thusfar pleased with it.  For some stranger reason, the ethernet connection to the desktop will drop  once or twice a day and then reconnect a couple of seconds later. 

Is there anything I can do to correct this?  My old Buffalo router did not do this.

Thanks

[EddieZ]

Please post the log showing the disconnects.

[kwhombre]

This is the most recent log.  I really don't understand anything on it.  The connection to the ethernet connection to the desktop was just interrupted a few minutes ago and then came back again.

[INFO] Tue Aug 10 12:21:48 2010 Blocked incoming TCP packet from 76.29.148.178:35762 to 76.26.60.199:3084 as PSH:ACK received but there is no active connection
[INFO] Tue Aug 10 12:21:29 2010 Above message repeated 5 times
[INFO] Tue Aug 10 12:21:05 2010 Log viewed by IP address 192.168.0.198
[INFO] Tue Aug 10 12:20:27 2010 Above message repeated 1 times
[INFO] Tue Aug 10 12:20:24 2010 Allowed configuration authentication by IP address 192.168.0.198
[INFO] Tue Aug 10 12:20:21 2010 leahlevi2: Wireless system with MAC address secured and linked
[INFO] Tue Aug 10 12:20:20 2010 Blocked incoming TCP connection request from 218.10.111.119:12200 to 76.26.60.199:8085
[INFO] Tue Aug 10 12:20:18 2010 leahlevi2: Wireless system with MAC address ?? associated
[INFO] Tue Aug 10 12:20:18 2010 Above message repeated 1 times
[INFO] Tue Aug 10 12:20:12 2010 leahlevi2: Wireless system with MAC address ? secured and linked
[INFO] Tue Aug 10 12:20:11 2010 Firmware upgrade server wrpd.dlink.com.tw is at IP address 210.242.32.129
[WARN] Tue Aug 10 12:20:10 2010 A network computer (??) was assigned the IP address of 192.168.0.198.
[INFO] Tue Aug 10 12:20:09 2010 leahlevi2: Wireless system with MAC address associated
[INFO] Tue Aug 10 12:20:09 2010 Above message repeated 1 times
[INFO] Tue Aug 10 12:20:07 2010 Firmware upgrade server wrpd.dlink.com.tw is at IP address 210.242.32.129
[INFO] Tue Aug 10 12:20:04 2010 Wireless link is up
[INFO] Tue Aug 10 12:20:03 2010 Blocked outgoing TCP packet from 192.168.0.198:3084 to 76.29.148.178:35762 as PSH:ACK received but there is no active connection
[INFO] Tue Aug 10 12:20:02 2010 WAN interface speed measurement aborted as they did not converge
[INFO] Tue Aug 10 12:20:01 2010 Starting DHCP server
[INFO] Tue Aug 10 12:19:55 2010 Estimating speed of WAN interface
[INFO] Tue Aug 10 12:19:54 2010 Obtained IP Address using DHCP. IP address is 76.26.60.199
[INFO] Tue Aug 10 12:19:54 2010 Bringing up WAN using DHCP
[INFO] Tue Aug 10 12:19:54 2010 WAN interface cable has been connected
[INFO] Tue Aug 10 12:19:54 2010 LAN interface is up
[INFO] Tue Aug 10 12:19:54 2010 LAN Ethernet Carrier Detected
[INFO] Tue Aug 10 12:19:53 2010 Device initialized
[WARN] Tue Aug 10 12:19:52 2010 Wireless schedule init
[INFO] Tue Aug 10 12:19:52 2010 No Internet access policy is in effect. Unrestricted Internet access allowed to everyone

[marmoduke]

Review DHCP reservation policies.

Examine NIC settings and set manually and not auto detect on computer.  Make sure it is set to Full Duplex.

Make sure Cable is shielded and of good quality.

[EddieZ]

I notice some strange 'blocked..' messages. Have you checked you PC thoroughly for virus/malware?

[kwhombre]

Norton Internet Security is running and does twice weekly checks.  No viruses.  Also run Malwarebytes and no malware.  I wondered what the blocked TCP business meant.  I looked earlier today and there were numerous entries of the same:  blocked TCP connection from .....IP

[marmoduke]

I see nothing too dangerous in your log.  Attempted routine intrusion from a server in China which was blocked.  That is why you have a firewall isn't it?

You seem to be conversing with your ISP, Comcast in Florida.  This is normal if you have Comcast and live in or near Florida.

Do not set up any type of blocking between you and Comcast so their traffic gets through.

[EddieZ]

Is your Comcast modem also going offline sometimes? If so, that would explain a lot...