I do know that Cox has a lot of work going on lately upgrading/changing their network. perhaps it is totally unrelated?
On Wed, 1 Sep 2004 10:25:31 -0500, James Kuhns <[EMAIL PROTECTED]> wrote: > I had to connect my cable modem directly to the internet port on my Netgear > router. Before it went to a Smoothwall box and then to the router. The > Smoothie box is dying and I won't be able to get parts until this weekend so > I figured I'd just use the hardware firewall in the router for now. After > making the change I noticed I was having to bounce the cable modem 3 or 4 > times a day. This morning I bounced it when I got up and launched the > router status that shows the transfer stats. After keeping an eye on the > stats for about 15 minutes (with a basically idle network) it had already > received over 100K packets (with bursts where it got over 15K in about 6 > secs). I also noticed the activity light on the modem was not blinking very > much at times (it's basically on steady) I'm assuming these packets are > coming from idiots scanning machines on Cox' net and I never noticed them > before because Smoothwall/Snort/Guardian would drop the packet, block the > idiot and add one log entry. There's no way to get this router to drop the > packet (it wants to reply for some reason). I'm thinking that since the > router is now replying, the idiots know there is something there and keep > probing - with no logs I can't even tell where they're coming from. I'm > thinking that the times I've had to bounce is when the bursts have gotten > really bad and the modem locked up. > > Anyway, what I'm curious about is: 1) could receive rates like this lock up > a cable modem?, 2) is this normal on Cox's net? (I know they've always had > people scanning but has it gotten this bad lately) and 3) am I way off base > on this and it's actually a hardware issue on my end or a coincidence and > something is going on with Cox' net right now (with no logs I can't tell > exactly what's going on). > > Anyone have any ideas? > > Hopefully this will be a non-issue after the Smoothie box goes back up this > weekend. > > James > > _______________________________________________ > General mailing list > [email protected] > http://brlug.net/mailman/listinfo/general_brlug.net >
