Router getting hit by external traffic, causing bad network performance

dbrt — Mon, 05 Jul 2010 11:36:24 GMT

Hi,

I've got a very weird issue with our new BT Biz connection. Since I connected the router on Monday last week, it has been getting slammed by loads of external traffic. Initially I thought we had a virus on one of the machines, but it happens across all our computers and over the weekend we had no computers connected to the network, and there was still loads of these entries in the logs with destinations to IPs not in our network.

This activity is bringing the router to a standstill, causing dropouts on the network and makes normal web surfing impossible.

Below is two samples of the errors I am seeing in the logs. As you can see by the date and time, it is pretty nasty (30 entries in the one second).

INF	2010-07-05T12:15:34+01:00	fw,fwmon	src=85.84.20.185 dst=192.168.1.71 ipprot=17 (layer 4 info unknown) Unknown inbound session stopped
INF	2010-07-05T12:15:34+01:00	fw,fwmon	src=92.56.37.197 dst=192.168.1.71 ipprot=17 (layer 4 info unknown) Unknown inbound session stopped
INF	2010-07-05T12:15:34+01:00	fw,fwmon	src=194.54.17.12 dst=192.168.1.71 ipprot=17 (layer 4 info unknown) Unknown inbound session stopped
INF	2010-07-05T12:15:34+01:00	fw,fwmon	src=87.126.213.59 dst=192.168.1.71 ipprot=17 (layer 4 info unknown) Unknown inbound session stopped
INF	2010-07-05T12:15:34+01:00	fw,fwmon	src=219.197.112.4 dst=192.168.1.71 ipprot=17 (layer 4 info unknown) Unknown inbound session stopped

INF	2010-07-05T12:16:01+01:00	fw,fwmon	src=62.202.102.92 dst=(our IP) ipprot=1 icmp_type=3 icmp_code=3 ICMP Dest Unreachable, session terminated
INF	2010-07-05T12:16:04+01:00	fw,fwmon	src=125.188.52.8 dst=(our IP) ipprot=1 icmp_type=3 icmp_code=3 ICMP Dest Unreachable, session terminated
INF	2010-07-05T12:16:04+01:00	fw,fwmon	src=92.227.114.144 dst=(our IP) ipprot=1 icmp_type=3 icmp_code=13 ICMP Dest Unreachable, session terminated
INF	2010-07-05T12:16:05+01:00	fw,fwmon	src=115.135.8.171 dst=(our IP) ipprot=1 icmp_type=3 icmp_code=3 ICMP Dest Unreachable, session terminated

I've also found someone else having the same issues, though not on the BT network.

http://forum.zensupport.co.uk/thread/29765.aspx

Any help would be appreciated.

Thanks,

David

Re: Router getting hit by external traffic, causing bad network performance

chrismcl — Mon, 05 Jul 2010 20:26:42 GMT

Hi there David,

Can I ask if you have a static IP address? If so, perhaps the previous person was misbehaving with it and hence why they perhaps ditched it or something else. I would like to help and would need to know if it is single or multiple. If you could be so kind to PM me the details I will take a look when at work tomorrow. Perhaps a contact number would be benificial too.

Re: Router getting hit by external traffic, causing bad network performance

arabgogs — Mon, 25 Jul 2011 12:15:25 GMT

Hi dbrt,

did you ever get to the bottom of this issue, as I am currently experiencing the same issues with my network.

Re: Router getting hit by external traffic, causing bad network performance

JohnE — Tue, 26 Jul 2011 09:43:56 GMT

For issues such as this, I'd strongly recommend that you Contact Us We should be able to help you get to the bottom of this.

topic Router getting hit by external traffic, causing bad network performance in Archive

Router getting hit by external traffic, causing bad network performance

Re: Router getting hit by external traffic, causing bad network performance

Re: Router getting hit by external traffic, causing bad network performance

Re: Router getting hit by external traffic, causing bad network performance