1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Constant incoming traffic

Discussion in 'Tomato Firmware' started by DigiH, Oct 13, 2007.

  1. DigiH

    DigiH Network Guru Member

    Hi everybody,

    I have been using Tomato on my PPPoE setup for quite a while now, and am a very big fan of this brilliant firmware, so much that when my family asked me to set up a router for them for their cable internet access I made them buy a WRT54GL and installed Tomato on it straight away.

    All works fine as expected but there is one thing which confuses me. The connection to the cable modem is via "DHCP" and while going through the bandwidth monitoring and the logs I found that there is a constant denial of incoming requests on the WAN side:

    Oct 13 08:46:12 WRT54G user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff SRC=10.123.45.1 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=39196 PROTO=UDP SPT=67 DPT=68 LEN=308
    Oct 13 08:46:13 WRT54G user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff SRC=10.123.45.1 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=39216 PROTO=UDP SPT=67 DPT=68 LEN=308
    Oct 13 08:46:13 WRT54G user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff SRC=10.123.45.1 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=39223 PROTO=UDP SPT=67 DPT=68 LEN=308
    Oct 13 08:46:22 WRT54G user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff:ff SRC=10.123.45.1 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=39380 PROTO=UDP SPT=67 DPT=68 LEN=308

    (MAC address and IP changed for privacy :)


    From my understanding of the SPT and DPT I take it that those are rejected DHCP requests, but I can't think of a reason why they would be there in the first place and on such a constant rate (adding up to around 150 Mb each day).

    Do others with cable modems have similar occurrences and is this normal for DHCP/Cable modem set ups?

    Any insight into this issue would be very welcome.

    Many thanks.
     

Share This Page