Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[BPR]

I get many log entries containing the following:

Quote ON
<sppe_cmd_arp> Fail to read IPv4 ARP entry
Quote OFF

I would like to learn more about what this means ... there is other variable data at the beginning & end of the string ... but nothing I can use to find out what might be wrong.

the variable data at the end of the string looks almost like a MAC ID ... but it is short 1 character.

Is there a log reference with an explanation of specific log entries?

[FurryNutz]

Link>Welcome!

• What Hardware version is your router? Look at sticker under the router case.
• Link>What Firmware version is currently loaded? Found on the routers web page under status.
• What region are you located?

Internet Service Provider and Modem Configurations

• What ISP Service do you have? Cable or DSL?
• What ISP Modem Mfr. and model # do you have?

[BPR]

Thank you for your interest ... R U a D-Link employee?

DSR-250 Model = A1
Router Firmware Version = 1.09B76_WW
ISP Connection is ADSL2
ISP = teksavvy.com
Current DSL MODEM = D-Link DSL-520B
MODEM Firmware Version = NA_1.10

Currently have a number of issues with the DSR-250 ... I hope that understanding what the log file is telling me will help me resolve these issues.  There is an overall performance issue that I thought these log entries:

Quote ON
[DSR-250]Wed Feb 10 08:57:02 2016(GMT-0500) [DSR-250][Kernel][KERNEL] [ 5113.510000] <sppe_cmd_arp> Fail to read IPv4 ARP entry, IP 0xac1001e5
[DSR-250]Wed Feb 10 08:57:02 2016(GMT-0500) [DSR-250][Kernel][KERNEL] [ 5113.600000] <sppe_cmd_arp> Fail to read IPv4 ARP entry, IP 0xac1001e3
Quote OFF

might be a clue for ... I orginally suspected errant MAC IDs on the LAN.  I had 4 Access Points until a week ago, and eliminated all but one and then set that one to block all MACs except for those that I verified as my own.  Now I have only a few Gigabit switches and 20 or so devices connected to the LAN side of the router, but these log entries persist ... lots of them.  The end of the line appears to be a hex address, not a MAC ID ... and it seems to be different on each entry.

after a reboot or re-config the router tells me please wait for more than 10 minutes before it will accept additional commands, a display of active sessions sometimes takes longer than the admin automatic logout timer.  So, it appears to be much too busy doing something, but I haven't been able to figure out what yet.

[FurryNutz]

Where did you get v1.09 from? I see this build is 76. I only see build 32 available.

Is the ISP modem bridge and is the DSR handling NAT only?
I'd start by isolating the router from the APs and switches and test with one wired PC direct to the DSR and look at the logs.
If it's still happening, Id do one factory reset with the one PC and look again.

[BPR]

D-Link Tech support sent me a link to use to download the Firmware.

I was originally running the DSL MODEM in Bridge mode ... but that prevents me from setting the time.  The MODEM always resets its clock to Jan 1, 2000 ... so when I try to look at log entries to compare with other syslog entries sorted by time stamps it is difficult to relate.  I then set the MODEM into PPPoE mode so that I could set its clock, and the DSR-250 into WAN/DHCP mode with the  DSR-250 set as the DMZ host for the DSL-520B ... neither mode seems to affect the performance issue, nor the plethora of log entries similar to those in my previous post.

I also have a problem with SSL VPN connections, and did suspect double NAT, even though I had set the DSR-250 as the DMZ host within the DSL-520B config.  So, I have put it back to Bridge mode this morning ... this caused a 20 minute outage of the DSR-250 ... I initialy reset the DSR-250 WAN to PPPoE when I set the MODEM into Bridge mode, but I forgot to turn off its DHCP at the same time ... so when the router re-connected to the MODEM it refused to initiate PPPoE and reverted to DHCP instead ... then was not ready to accept commands for about 15 minutes before I could change it back to PPPoE and restart it.

I did swap out the DSR-250 to look for unauthorized MAC IDs on the LAN, found none ... there seems to be no ARP problem with any other device.

I have done factory reset 3 times now ... once reloading the saved backup config, then 2 more times re-keying all of the config settings, including MAC IDs of DHCP reserved devices on the LAN (takes hours).

I have not attempted to do reset and then rebuild the LAN one device at a time yet ... because it would be to disruptive for other uses.  I'm not sure that is the best approach now, I don't want to eliminate the log entries ... I want to understand them and address the problem that they indicate ... putting up the LAN one device at a time will likely reduce traffic and the log entries may simply disappear because of a lighter load without helping me understand what is causing them.

Do you know what the log entries mean?  Do you know where I can find out? 

These particular log entries are not listed in the Log Reference appendix of the owner's manual ... and I have not been able to find an updated version of the log reference on line, but hope that there is one.

[FurryNutz]

I would recommend looking into getting a newer ISP modem. Seems like the ISP modem could be having issues. I think that model modem is getting a bit old.

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. Reference this thread. We find that phone contact has better immediate results over using email.
Let us know how it goes please.

[BPR]

R U suggesting that the D-Link DSL-520B MODEM is contributing to the performance issue with the DSR-250?

Or that the the log entries could be related to something the MODEM is doing?

I can switch the MODEM out to find out ... I have several TP-Link and Speedtouch MODEMS ready to go ... the DSL-520B is the newest of the bunch though, purchased in 2015.

I'll swap out the MODEM in a few minutes ... probably take until tomorrow AM to see what effect it might have.

[FurryNutz]

Does the 520 support 100 or 1000Mb connection rates on his WAN port?

[BPR]

The D-Link DSL-520B is an ADSL2 MODEM/Router with ONE 100MB LAN Ethernet port and ONE RJ11 WAN port to connect to the phone line.  The data rate of the WAN port is dependent upon the ADSL2 Synch rate ... currently it is 16M down and 1M up.  It can run as a router or bridged MODEM ... I prefer to use in bridge mode to prevent potential problems with double NAT.

re: effect of changing the MODEM ...

Last night I disconnected and powered off the DSL-520B.  I initially connected a Speedtouch 516 in Bridge mode, but its SNR measurements were slightly below my threshold for a reliable DSL service, so I changed it again to a 2-Wire 2701-G MODEM ... initially in PPPoE mode ... measured the SNR and found it acceptable, so I changed its WAN Mode to Bridge (after this change I can not log into it to read DSL Status ... need to reset it to make it readable again) ... and let it run overnight.

The particular log entries that I raised the original question about are still occurring at the rate of about 1 every 30 seconds now ... which is reduced a bit from the peak rate observed when the WAN link was nearly saturated (about 1 every 5 seconds then) ... so swapping the MODEM does not appear to have been the fix ... I think the reduced rate of these log entries is more likely related to the overall reduction in traffic.

So, I will probably pull the 2-Wire MODEM today and put the DSL-520B back online ... because I want to be able to monitor the DSL signal quality, and cannot do this with the 2-Wire MODEM in bridge mode.

[FurryNutz]

Well the DSR supports 1000Mb on its WAN port so it can support up too that rate and would be perferred if you could use that speed however 100Mb should be fine overall.

So after you swapped modems and you just had one PC online wired directly with the DSR with ALL other devices disconnected, log entries were still going? If so, this maybe something you'll need to get on the phone with and ask D-Link support about. Seems like something either on the PC, modem or router is causing the log entries and needs to be reviewed by D-Link support.

[BPR]

re: So after you swapped modems and you just had one PC online wired directly with the DSR with ALL other devices disconnected, log entries were still going?

No, I did not disconnect the LAN attached equipment.  There are at least 6 PCs running windows, an Ooma Telo, InfoLink (Phone) base, 8 Synology devices, a Netgear WPN802 Access point ... all with reserved IPs (bound to MAC) online.  I did take offline several Linux Servers and 2 windows 2003 Servers that were no longer being actively used.

And the peculiar Log Entries (example)

[DSR-250]Thu Feb 11 08:24:12 2016(GMT-0500) [DSR-250][Kernel][KERNEL] [89539.220000] <sppe_cmd_arp> Fail to read IPv4 ARP entry, IP 0x4a7de297
[DSR-250]Thu Feb 11 08:24:07 2016(GMT-0500) [DSR-250][Kernel][KERNEL] [89535.560000] <sppe_cmd_arp> Fail to read IPv4 ARP entry, IP 0x08080808

continue.

re: If so, this maybe something you'll need to get on the phone with and ask D-Link support about. Seems like something either on the PC, modem or router is causing the log entries and needs to be reviewed by D-Link support.

I did this already ... took a few hours of my time, spoke with Level 1, then got transferred to a 'business products tech rep' ... then got transferred to someone else that told me to upgrade the firmware using the link they sent me by email ... I did.  The worst problems:

1) WAN interface stops for 2 to 3 minutes every 15 minutes or so
2) unable to log on to WebGUI with Chrome browser

were fixed by the firmware upgrade ... I still have several residual problems though ... and believe these log entries could be a useful clue.  I am still unable to find out what these mean, and this is what I came to this forum to get help with ... hoping that someone else would know what these log entries mean, or better yet find a current and accurate log reference manual for this version of firmware on a DSR-250.

I re-sent the support chat session email back to D-Link support ... the record of my initial chat session that they sent me and requested that the trouble ticket be re-opened ... I am still waiting on a reply.

Phone support has not been effective for me, and often wastes too much of my time ... I am very reluctant to use voice / phone support.  It is too difficult to keep track of what has been said, what is correct, what is speculation, responses and suggestions from the Tech support personnel.  I usually only get 'boiler plate' responses anyway ... it has been years since I spoke to anyone at D-Link that has been able to engage in a genuine technical information exchange.   I don't expect that I will get the information I need from a support phone call ... but do hope that I will get it from a written exchange.

I hope that D-Link Tech support is monitoring this thread.

[FurryNutz]

I would recommend disconnecting ALL LAN devices accept for one to check for log entries.

Support does not monitor the forums.

Only other think I would try would be to take the DSR to a different location, friend, family or neighbor to see if the problem follows.
Canada region?