http://www.dslreports.com/forum/r21906791 en Thu, 10 Dec 2009 04:57:22 EDT Thu, 10 Dec 2009 04:57:22 EDT http://www.dslreports.com/forum/remark,21973788 GoBG : TS: "root" logging in from host 190.68.209.16 TS: "root" failed to authenticate
Today they tried a root command with another IP address.
]]> http://www.dslreports.com/forum/remark,21973788 Wed, 25 Feb 2009 09:52:53 EDT http://www.dslreports.com/forum/remark,21952317 GoBG : I just got this in my log this morning.

IKE: no matching ph1 tunnel: sg 116.232.169.77
I checked the IP and its from "Asia Pacific Network Information Centre"

Was this an attack?
]]> http://www.dslreports.com/forum/remark,21952317 Sat, 21 Feb 2009 08:34:25 EDT http://www.dslreports.com/forum/remark,21929520 GoBG : tschmidt, what does the "heartbeat" option do?]]> http://www.dslreports.com/forum/remark,21929520 Tue, 17 Feb 2009 10:22:37 EDT http://www.dslreports.com/forum/remark,21914390 GoBG : I see... it doesn't go over 3 attempts though. my last reboot it connected on the 2 try.]]> http://www.dslreports.com/forum/remark,21914390 Fri, 13 Feb 2009 23:11:03 EDT http://www.dslreports.com/forum/remark,21908078 tschmidt : Normally connects on first attempt. Router has been up since momentary power failure on Christmas. Had 5 log in attempts during that period.

Here is partial log showing router power up and first connections.

Message Log:12/25/08 03:58:42 AM L5 KS: Using configured options found in flash12/25/08 03:58:42 AM L5 KS: Customer default options found in flash - using12/25/08 03:58:42 AM L3 BOOT: Cold start v7.5.1 ---------------------------------- 12/25/08 03:58:42 AM L3 IP address server initialization complete 12/25/08 03:58:42 AM L3 HB: heartbeat service initializing12/25/08 03:58:42 AM L3 HB: heartbeat option disabled12/25/08 03:58:42 AM L4 BR: Using saved configuration options12/25/08 03:58:42 AM L4 BR: Netopia SOC OS version 7.5.1 (build r2)12/25/08 03:58:42 AM L4 BR: Netopia-3000/25598734 (Netopia-3000, rev 1), PID 121712/25/08 03:58:42 AM L4 BR: last install status: 12/25/08 03:58:42 AM L4 BR: memory sizes - 4096K Flash, 16384K RAM12/25/08 03:58:42 AM L3 BR: Starting kernel12/25/08 03:58:42 AM L3 AAL5: initializing service12/25/08 03:58:42 AM L4 ATM: Waiting for PHY layer to come up12/25/08 03:58:42 AM L3 POE: Initializing PPP over Ethernet service12/25/08 03:58:42 AM L4 POE: Binding to Ethernet (ether/vcc1)12/25/08 03:58:42 AM L3 BRDG: Bridge not enabled for WAN.12/25/08 03:58:42 AM L3 BRDG: Bridging from one WAN port to another is disabled12/25/08 03:58:42 AM L3 BRDG: Initialization complete12/25/08 03:58:42 AM L4 IP: Routing between WAN ports is disabled12/25/08 03:58:42 AM L4 IP: IPSec client pass through is enabled12/25/08 03:58:42 AM L4 IP: Address mapping enabled on interface PPP over Ethernet vcc112/25/08 03:58:42 AM L3 IP: Adding default gateway over PPP over Ethernet vcc112/25/08 03:58:42 AM L3 IP: Initialization complete12/25/08 03:58:42 AM L3 IPSec: initializing service12/25/08 03:58:42 AM L3 IPSec: Initialization complete12/25/08 03:58:42 AM L3 PPP: PPP over Ethernet vcc1 binding to PPPoE12/25/08 03:58:42 AM L3 PPP: PPP over Ethernet vcc1 Port listening for incoming PPP connection requests12/25/08 03:58:42 AM L3 BRDG: (10/100BT-LAN) Port Physical Link Active12/25/08 03:58:42 AM L3 IP: (10/100BT-LAN) Ethernet Physical Link Active12/25/08 03:58:42 AM L3 IP: (10/100BT-LAN) IP Protocol Up12/25/08 03:58:42 AM L3 RIP: initializing12/25/08 03:58:42 AM L3 DHCP: Initializing Service12/25/08 03:58:42 AM L3 DHCP: Setup Server On UDP Port 6712/25/08 03:58:42 AM L3 DHCP: Setup Client On UDP Port 6812/25/08 03:58:42 AM L3 DNS: initializing service12/25/08 03:58:42 AM L4 DNS: nameserver address is 0.0.0.012/25/08 03:58:42 AM L3 SNMP: initializing service over UDP12/25/08 03:58:42 AM L3 DIA: Diagnostics service initializing12/25/08 03:58:42 AM L3 FW: initializing service12/25/08 03:58:42 AM L3 FW: Firewall service is disabled12/25/08 03:58:42 AM L3 SSL: Initializing Service12/25/08 03:58:42 AM L3 SSL: Installed Verisign, Equifax & Thawte Root CA certificates12/25/08 03:58:42 AM L3 SSL: Initialization Success12/25/08 03:59:03 AM L4 RFC1483-1 up 12/25/08 03:59:08 AM L3 Service-Name=ANY12/25/08 03:59:08 AM L3 Host-Uniq 0000000112/25/08 03:59:08 AM L3 AC-Name=MAN-DSL-RTR312/25/08 03:59:08 AM L3 AC-Cookie F109F57E8769BC834BED82FBC745E09A12/25/08 03:59:08 AM L3 lcp: LCP Send Config-Request+12/25/08 03:59:08 AM L3 MAGIC 0x52077cdd+12/25/08 03:59:08 AM L3 lcp: LCP Recv Config-Req:+12/25/08 03:59:08 AM L3 MRU(1492) (ACK) AUTHTYPE(c023) (PAP) (ACK) MAGICNUMBER12/25/08 03:59:08 AM L3 (9af292df) (ACK)12/25/08 03:59:08 AM L3 lcp: returning Configure-Ack12/25/08 03:59:08 AM L3 pap: received Authenticate-Ack, id 112/25/08 03:59:08 AM L3 pap: Remote message: 12/25/08 03:59:08 AM L3 ipcp: IPCP Config-Request+12/25/08 03:59:08 AM L3 ADDR(0x0) DNS(0x0) DNS2(0x0) WINS(0x0) WINS2(0x0)12/25/08 03:59:08 AM L3 ipcp: IPCP Recv Config-Req:+12/25/08 03:59:08 AM L3 ADDR(10.20.12.1) (ACK)12/25/08 03:59:08 AM L3 ipcp: returning Configure-ACK12/25/08 03:59:08 AM L3 ppp: received frame for uninstalled protocol ()12/25/08 03:59:08 AM L3 ipcp: IPCP Config-Request+12/25/08 03:59:08 AM L3 ADDR(0x0) DNS(0x0) DNS2(0x0)12/25/08 03:59:08 AM L3 ipcp: IPCP Config-Request+12/25/08 03:59:08 AM L3 ADDR(0x4610ce7c) DNS(0x97cb0054) DNS2(0x97cb0055)12/25/08 03:59:08 AM L3 ipcp: negotiated remote IP address 10.20.12.112/25/08 03:59:08 AM L3 ipcp: negotiated IP address 70.16.206.12412/25/08 03:59:08 AM L3 ipcp: negotiated TCP hdr commpression off12/25/08 03:59:48 AM L3 NTP: Update system date & time 12/25/08 07:22:44 PM L4 HTTP: "admin" completed login from 192.168.2.1312/25/08 07:27:55 PM L4 HTTP: "admin" host 192.168.2.13 logging out (timing out) 
/tom]]> http://www.dslreports.com/forum/remark,21908078 Thu, 12 Feb 2009 20:11:12 EDT http://www.dslreports.com/forum/remark,21907656 GoBG : Interesting. I just got the 3347nwg-006 today and was getting these fail attempts. I reset the modem to factor settings, updated the firmware to nta774r1. Everything is good other than that. Do you connect on first attempt, tschmidt?
]]> http://www.dslreports.com/forum/remark,21907656 Thu, 12 Feb 2009 18:51:18 EDT http://www.dslreports.com/forum/remark,21907309 tschmidt : If you are using PPPoE it may not be connection quality but problems establishing/maintaining PPPoE session, most likely the RADIUS server.

Need to decouple loss of sync, where modem is unable to maintain connection to DSLAM, and problems with PPPoE session.

/tom]]> http://www.dslreports.com/forum/remark,21907309 Thu, 12 Feb 2009 17:45:41 EDT http://www.dslreports.com/forum/remark,21906791 GoBG : How important is this number? I read the lower the better. My stats have me dropping sync 2 times before connecting on the 3rd attempt.. should I be concern? ]]> http://www.dslreports.com/forum/remark,21906791 Thu, 12 Feb 2009 16:09:44 EDT