dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
3211
share rss forum feed


HotBacon

@hp.com

twinge attack - dlink router

I recently started getting booted from the EA servers when playing Xbox, but remain connected to Xbox Live. After doing some research, I see that my router (DLink WBR1310) is logging a twinge attack roughly at the times I get booted. Unfortunately the log does not display the offending IP address.

The interwebs tell me to disable WAN ping, so I did that this weekend. I checked the router log last night and see that the twinge attacks are still occurring.

1. Is there a delay in disabling WAN ping and when I can expect the attacks to stop?
2. Is there any other way to prevent these attacks from booting me mid-game?
3. Is there any way to find the offending IP address if my router isn't logging it?


HELLFIRE
Premium
join:2009-11-25
kudos:13

1. For the router to stop responding to pings, happens immediately after you change the settings.
For the attacks to stop, well ping is a basic networking tool, so short answer is no.

2. can you still correlate the actual attacks to you dropping from the game? You noted 'roughly' the
same time, which is not quite the same thing as 'IS the same time.'

3. with your current setup / equipment, likely not.

Can you post up the logs from your WBR1310, both before and after you disabled ping from the WAN?

Regards



HotBacon

@comcast.net

I talked to my ISP today, and they ddin't seem to understand my issue. They "sent a signal to boost my internet connection" and provided me w/ info on how to get a new IP address for my house. I did this, and started to play Xbox tonight. After about 3 hours of solid connection, I got disconnected. I checked the log in my router and saw a new type of attack - SYN ATTACK. Here's my log, I played until about midnight when I was cut off. I switched from TW to NHL11 (both EA games) at somewhere around the 10:50pm mark. I remained connected to Xbox Live the entire length of this log, even after being booted from the EA server at midnight.

Time Message Source Destination Note
May/18/2012 00:22:09 DHCP lease IP 192.168.0.100 to Laptop 00-22-5f-aa-61-9c
May/18/2012 00:22:08 Wireless PC connected 00-22-5f-aa-61-9c
May/18/2012 00:09:48 DHCP lease IP 192.168.0.101 to Android_A1000017EBB5AA 64-a7-69-9b-0e-eb
May/18/2012 00:07:27 DHCP lease IP 192.168.0.101 to Android_A1000017EBB5AA 64-a7-69-9b-0e-eb
May/18/2012 00:06:55 DHCP lease IP 192.168.0.101 to Android_A1000017EBB5AA 64-a7-69-9b-0e-eb
May/18/2012 00:06:39 DHCP lease IP 192.168.0.101 to Android_A1000017EBB5AA 64-a7-69-9b-0e-eb
May/18/2012 00:06:31 DHCP lease IP 192.168.0.101 to Android_A1000017EBB5AA 64-a7-69-9b-0e-eb
May/18/2012 00:06:27 DHCP lease IP 192.168.0.101 to Android_A1000017EBB5AA 64-a7-69-9b-0e-eb
May/17/2012 22:55:10 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:55:09 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:55:08 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:55:07 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:55:05 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:55:04 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:55:03 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:55:02 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:55:01 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:55:00 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:59 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:58 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:57 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:56 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:54 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:53 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:52 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:51 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:50 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:49 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:48 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:47 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:46 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:45 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:43 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:42 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:41 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:40 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:39 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:38 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:37 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:36 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:35 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:34 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:32 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:31 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:30 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:29 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:28 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:27 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:26 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:25 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:24 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:23 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:21 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:20 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:19 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:18 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:17 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:16 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:15 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:14 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:13 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:12 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:10 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:09 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:08 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:07 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:06 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:54:06 TWINGE ATTACK Detect Packet Dropped
May/17/2012 22:54:05 TWINGE ATTACK Detect Packet Dropped
May/17/2012 22:54:05 TWINGE ATTACK Detect Packet Dropped
May/17/2012 22:54:04 TWINGE ATTACK Detect Packet Dropped
May/17/2012 22:53:23 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:22 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:21 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:20 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:19 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:18 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:17 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:15 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:14 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:13 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:12 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:11 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:10 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:09 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:08 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:07 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:06 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:04 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:03 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:02 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:01 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:53:00 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:59 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:58 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:57 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:56 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:55 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:53 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:52 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:51 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:50 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:49 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:48 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:47 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:46 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:45 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:44 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:43 TWINGE ATTACK Detect Packet Dropped
May/17/2012 22:52:42 SYN Flood Attack Detect Packet Dropped
May/17/2012 22:52:42 TWINGE ATTACK Detect Packet Dropped
May/17/2012 22:52:42 TWINGE ATTACK Detect Packet Dropped
May/17/2012 22:52:41 TWINGE ATTACK Detect Packet Dropped
May/17/2012 22:48:43 DHCP lease IP 192.168.0.100 to Laptop 00-22-5f-aa-61-9c
May/17/2012 22:48:43 Wireless PC connected 00-22-5f-aa-61-9c
May/17/2012 22:47:23 Wireless PC connected 00-12-5a-a9-b8-cf
May/17/2012 22:42:21 Wireless PC connected 00-12-5a-a9-b8-cf
May/17/2012 22:41:46 Wireless PC connected 00-12-5a-a9-b8-cf
May/17/2012 22:40:11 Wireless PC connected 00-12-5a-a9-b8-cf
May/17/2012 22:36:28 DHCP lease IP 192.168.0.101 to Android_A1000017EBB5AA 64-a7-69-9b-0e-eb


HELLFIRE
Premium
join:2009-11-25
kudos:13
reply to HotBacon

Again, does the log timestamps correspond EXACTLY to the time of the game disconnect? If not, you're chasing ghosts.

Also, is your DLINK set to sync its time to some NTP source? If you are going to focus on your logs, you'll want
to make sure the log timestamps are as accurate as possible.

Taking a look at your logs, two things catch my attention :
a) syn flood is like all the door-to-door salesmen and their dog knocking on your door to sell you something.
It happens, but also, take a look what th the log says, which is 'PACKET DROPPED.' This is a nonissue and
the router is doing its job.

If this was happening and taking out your internet connection entirely, THEN I'd start digging deeper into it.

b) same goes for the TWINGE ATTACK log, which also says 'PACKET DROPPED.'

Seriously though, I'd start looking elsewhere for a reason for the game drops or get a more capable piece of hardware. My 00000010bits

Regards