Random lagspikes

Discussion in 'Tomato Firmware' started by Sinjid, Nov 27, 2010.

  1. Sinjid

    Sinjid Networkin' Nut Member

    Hey all!

    I'm using the lastest firmware by Victek on my WRT54GL 1.1 (Tomato RAF Firmware v1.28.8515 _RAF ND Std). For about 3 weeks now we've been getting random lagspikes. They last about 10-20 sec before all traffic is resumed. During the lagspikes all internet activity for that user is halted. At first I thought the ISP was having some issues but the problem remains. There's multiple users using the router and the funny thing is that we don't get the lagspikes at the very same time (tested), but each randomly. It also doesn't seem to matter how many users are on the router, how many connections are open or if there's allot of download activity.
    I've checked out the routers logs and they all seem normal so I'm really clueless of what it could be.

    I just had another lagspike while I'm the only one using the router. I have the webbrowser open and an online game. In the detail pane of the QOS it says there's 8 connections open in total. CPU load is 0.04/0.02/0.00. Memory 14.07mb/8,712.00 KB (60,48%)

    The things I tried so far is:
    Disable the QOS service all together, get rid of a bandwidth script I had running, erase the routers data thoroughly (NVRAM erase) and set the conntrack times higher. The router is running at 240mhz and the wireless is set to 70 strength. I may have tried more but this is all I can think of at the moment.
    I'm using Toastman's QOS setup (best so far).

    Does anyone have a clue of what might be going on here? I can supply screenshots of the routers setup if needed.

    Many thanks for your time!
  2. Toastman

    Toastman Super Moderator Staff Member Member

    If it is only for one particular user it seems to imply that it is

    a) Something on that PC that is stopping communications - check out half - open connections on XP.


    b) Maybe the PC is sending out a lot of traffic which may be invisible to the router and doesn't show in the logs. Often a machine can go nuts and send out a lot of Microsoft Network protocol stuff locally. Also a rather obscure thing in Vista and Windows 7 seems to send bursts of traffic which might be the problem - it's Teredo which is enabled by default. You can usually see if Teredo is being used from the UPnP page. You might try disabling it on all PC's, just in case.

    Right-click Command Prompt, and click Run as Administrator and type:

    set state disabled​

    c) If you are using a little home network switch, often they can't cope with the numbers of connections and freeze up for several seconds.

    d) Unforeseen problems with QOS, which take a bit more pondering about.
  3. Sinjid

    Sinjid Networkin' Nut Member

    Well it's not exactly one person having all the issues but multiple users having the same issue, just not at the same time.

    We are all running Windows 7 as far as I know and I've often seen Teredo connections being made in the uPNP section. There are no other networking devices involved (such as switches) and the QOS seems alright to me. It's pretty much the same as the one from your thread.

    I'm going to see if the Teredo option works next. Any other tips are much appreciated.


    I've downgraded to 1.25 to see if the issue is resolved, using the same settings but put in manually (no restore of the configuration file)
  4. szfong

    szfong Network Guru Member

    Teredo is a tunneling protocol commonly used by Peer-to-Peer, Worms and Spyware on Win7 systems. It also makes it easier to turn your computer connection into a zombie. Those lags may be caused when your computer is used to attack a target.

    So, be careful what you d/l or install on your computer. Anti-virus software can sometimes not detect these worms. It's advisable to restore your system to a known to be good "image copy" of your HDD and see if you still have lags.
  5. Sinjid

    Sinjid Networkin' Nut Member

    I've done a few scans with different anti-spyware programs, different virusscanners including Norton, NOD32 and Mcafee's Stinger. Nothing has come up.

    Since I downgraded to the router to 1.25 I've not yet experienced lagspikes. We'll see how this goes. Thanks for your time!
  6. Sinjid

    Sinjid Networkin' Nut Member

    The lagspikes are back. No Teredo mappings have been made so far. I'm stumped!
  7. szfong

    szfong Network Guru Member

    Modern worms can contain defensive mechanisms that triggers when you try to do a malware scan. It's best to connect only a known, good installation of Windows/Mac and go from there. Backup important stuff such as documents, photos, etc.. onto external storage, and use the recovery disc that you created when you bought your computer.
  8. Azuse

    Azuse LI Guru Member

    Any reason you went from teredo to worm to format skipping hardware or driver faults? Teredo is a legitimate, very active service if there a lot of ipv6 going around (torrents seem to be the most common, but there's a growing number of websites/proxys/internet backbone providers using it.

    I've had corrupt nvram do this to me in the past, as have outdated realtek drivers and dodgy switches. Tbh, the best thing to do is locate another router to rule you current one in or out. Then go down the virus road.
  9. Sinjid

    Sinjid Networkin' Nut Member

    I may have to do this then. It's really becoming frustrating. Just earlier I did a full reset of the router. NVRAM cleared and settings restored manually. The lagspikes remain. Since I don't have any easy access to routers I may have to consider buying a new one.
  10. szfong

    szfong Network Guru Member

    The reason I suspect a worm/spyware on 1 or more of computer is because Tomato v1.28 is extremely stable.. Though of course if he has an extra router, he can try and see if it helps. I believe he must have some sort of bandwidth hungry app running intermittently causing those lag spikes, maybe it's a benign auto startup emule/torrent app doing occassional transfers... or possibly something more malicious.. such as worm/spyware.. who knows... alot of trial & error / process of elimination I guess...
  11. Sinjid

    Sinjid Networkin' Nut Member

    Oh right well yeah that's a good angle still. My computer is running really fast though and I myself don't use any P2P traffic. Nothing crazy is loading in the background and as far as I can tell I have no worms/viruses or any of the kind.

    When I think back of when I started to get lagspikes it was before upgrading to 1.28 and when I set the router to 250 mhz. I think it was around that time it started to get funny. Setting it back to 200 mhz doesn't solve the issue though. So still looking :) and possible getting another router.
  12. szfong

    szfong Network Guru Member

    You shouldn't overclock, especially in warm environments or play around w/ the tx power settings. You hadn't mentioned what sort of ISP tier are you on. You must be on a very fast tier for you to consider overclocking. Lags can occur if the slow router's cpu can't keep up.

    I highly recommend the WND3700.. It is probably one of the best non-Tomato routers I've used--stable as heck, set it and forget it, no need to reboot ever. I connect a Buffalo Tomato 1.28 as a wireless ethernet bridge and connect low-speed -G and 100mbps stuff to it and all -N and Gigabit stuff to the WNDR3700. Anyhow... Good Luck...
  13. Azuse

    Azuse LI Guru Member

    RT-N16 > WNDR3700 > rest.

    Most people don't have a spare router, unless (like me) their isp sent them something crappy when they signed up. What I meant was try to borrow one from a neighbour/friend/local pc shop.

    You did boot in safe mode to rule out background programs didn't you?
  14. Sinjid

    Sinjid Networkin' Nut Member

    The router's been back on it's normal 200 mhz for quite a bit now. Ive reset the router completely one more time clearing every setting and with NVRAM. The issue persists. I've contacted the company of the game to see if they can see anything odd on their side of the net.

    I'm currently considering the RT-N16 router for purchase. Thanks for your help guys :)!
  15. Sinjid

    Sinjid Networkin' Nut Member

    For people curious what the issue was, today I've gotten the answer.

    My ISP upgraded everyone's speed not too long ago. The signal frequency was also turned up to ensure the speed, however the higher frequency is a little wobbly. We're using splitters in our house since there's several students living here.

    Problem: The modem isn't getting a clear signal, infact it's downward awful. We're getting internet outages often.

    The technician that came over suggested that we put in a cable amplifier but we have no power in the meter cupboard (I'm not sure if that word is correct but I got it from the internet :p).

    My question to you guys is if you know any other solutions I might apply. The person from who we rent this place won't be in our country for quite some time and hiring an electrician to put power in sounds sort of expensive.

    Do you have any ideas?

  16. rhester72

    rhester72 Network Guru Member

    When I had a similar problem (in the US), I had a cable company tech dispatched who ran an entirely separate cable line directly from the street just for the cable modem, which solved the problem nicely (at no additional charge). Not sure if that is an option in your case.

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice