1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Unstable WiFi, help!

Discussion in 'Tomato Firmware' started by ericren23, Jun 25, 2007.

  1. ericren23

    ericren23 LI Guru Member

    I've been using 1.07 Tomato Firmware on my new WRT54GL for about a month now. My wired network is flawless. However, my WiFi connection is a bit of a mix bag. I have 2 computers with WiFi connection. Both of them worked fine with my old Dlink router, however after getting the linksys, one of them is plagued by connection problems.

    Sometimes I would have a stable connection uninterrupted, but often. my wireless fail to respond even though it shows its status as connected. The only way to rectify this problem is to switch the wireless off on, off on repeatedly until it connects. Other times it would connect again after waiting for 5 or so minutes. It even has trouble accessing the router's homepage when this problem arises.

    The log of my router shows this

    Code:
    Jun 25 19:20:36  user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:05:9a:d5:88:a8:08:00:45:00:01:48 SRC=10.25.128.1 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=255 ID=39058 PROTO=UDP SPT=67 DPT=68 LEN=308 
    Jun 25 19:20:36  user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:05:9a:d5:88:a8:08:00:45:00:01:48 SRC=10.25.128.1 DST=255.255.255.255 LEN=328 TOS=0x00 PREC=0x00 TTL=255 ID=39059 PROTO=UDP SPT=67 DPT=68 LEN=308 
    Jun 25 19:20:38  user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:05:9a:d5:88:a8:08:00:45:00:01:4e SRC=10.25.128.1 DST=255.255.255.255 LEN=334 TOS=0x00 PREC=0x00 TTL=255 ID=39062 PROTO=UDP SPT=67 DPT=68 LEN=314 
    Jun 25 19:20:39  user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:05:9a:d5:88:a8:08:00:45:00:01:4e SRC=10.25.128.1 DST=255.255.255.255 LEN=334 TOS=0x00 PREC=0x00 TTL=255 ID=39065 PROTO=UDP SPT=67 DPT=68 LEN=314 
    Jun 25 19:20:39  user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:05:9a:d5:88:a8:08:00:45:00:01:4e SRC=10.25.128.1 DST=255.255.255.255 LEN=334 TOS=0x00 PREC=0x00 TTL=255 ID=39066 PROTO=UDP SPT=67 DPT=68 LEN=314 
    Jun 25 19:20:39  user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:05:9a:d5:88:a8:08:00:45:00:01:58 SRC=10.25.128.1 DST=255.255.255.255 LEN=344 TOS=0x00 PREC=0x00 TTL=255 ID=39073 PROTO=UDP SPT=67 DPT=68 LEN=324 
    Jun 25 19:20:39  user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:05:9a:d5:88:a8:08:00:45:00:01:58 SRC=10.25.128.1 DST=255.255.255.255 LEN=344 TOS=0x00 PREC=0x00 TTL=255 ID=39074 PROTO=UDP SPT=67 DPT=68 LEN=324
    the 00:05:9A:D5:88:70 is the MAC address of my vlan interface. I dont know what the rest of those are.

    The whole log is filled with the above when that happens.

    I've tried both intel's and window's connection manager and still no solution? can anyone decipher what is going on?
    Esp. with the SRC=10.25.128.1 DST=255.255.255.255? What packet is this???

    cheers
     
  2. roadkill

    roadkill Super Moderator Staff Member Member

    some Intel wireless card drivers have some issues with some Broadcom based devices
    you can start by updating your driver and we'll move on from there...
    Intel WiFi Drivers
    :grin:
     
  3. ericren23

    ericren23 LI Guru Member

    Just updated my intel drivers to the latest - still not solved.
    Ive decided to check my Event Viewer logs and happened to stumble across the following errors:

    Code:
    Event Type:	Error
    Event Source:	MRxSmb
    Event Category:	None
    Event ID:	8003
    Date:		26/06/2007
    Time:		10:55:21 PM
    User:		N/A
    Computer:	MREX
    Description:
    The master browser has received a server announcement from the computer LAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{9BAB70D1-5BC1-4E44-8E. The master browser is stopping or an election is being forced.
    
    
    Event Type:	Warning
    Event Source:	MRxSmb
    Event Category:	None
    Event ID:	8004
    Date:		26/06/2007
    Time:		10:56:50 PM
    User:		N/A
    Computer:	MREX
    Description:
    A request has been submitted to promote the computer to backup when it is already a master browser.
    
    
    Event Type:	Warning
    Event Source:	BROWSER
    Event Category:	None
    Event ID:	8021
    Date:		19/06/2007
    Time:		11:24:22 PM
    User:		N/A
    Computer:	MREX
    Description:
    The browser was unable to retrieve a list of servers from the browser master \\LAPTOP on the network \Device\NetBT_Tcpip_{9BAB70D1-5BC1-4E44-8E8F-75A45B2800AE}. The data is the error code.
    
    \\LAPTOP is the other computer on the wireless network. From what I can gather also, that this problem happens weather the other computer is on or off.

    This browser master thing is quite beyond me.

    Also Im using the bandwidth shaping script generator to limit the internet speed of the computers. I need this to control excessive downloads from my internet connection.
    The following is my script:

    Code:
    #--------------------------------------------
    #WRT54 Script Generator v1.01
    #(C) 2006-2007 Robert "Robson" Mytkowski
    #--------------------------------------------
    TCA="tc class add dev br0"
    TFA="tc filter add dev br0"
    tc qdisc del dev br0 root
    tc qdisc add dev br0 root handle 1: htb
    tc class add dev br0 parent 1: classid 1:1 htb rate 9000kbit
    $TCA parent 1:1 classid 1:10 htb rate 2000kbit ceil 8000kbit prio 1
    $TCA parent 1:1 classid 1:11 htb rate 3000kbit ceil 8000kbit prio 0
    $TCA parent 1:1 classid 1:12 htb rate 128kbit ceil 128kbit prio 4
    $TCA parent 1:1 classid 1:13 htb rate 2000kbit ceil 8000kbit prio 1
    $TFA parent 1:0 prio 1 protocol ip handle 10 fw flowid 1:10
    $TFA parent 1:0 prio 0 protocol ip handle 11 fw flowid 1:11
    $TFA parent 1:0 prio 4 protocol ip handle 12 fw flowid 1:12
    $TFA parent 1:0 prio 1 protocol ip handle 13 fw flowid 1:13
    iptables -t mangle -A POSTROUTING -d 192.168.1.101 -j MARK --set-mark 10
    iptables -t mangle -A POSTROUTING -d 192.168.1.102 -j MARK --set-mark 11
    iptables -t mangle -A POSTROUTING -d 192.168.1.103 -j MARK --set-mark 12
    iptables -t mangle -A POSTROUTING -d 192.168.1.104 -j MARK --set-mark 13
    tc qdisc add dev br0 ingress
    $TFA parent ffff: protocol ip u32 match ip src 192.168.1.103 flowid :1 police rate 80kbit mtu 12k burst 10k drop
    
    This shouldnt affect my LAN though.

    192.168.1.104 is the ip of my computer with the problem
    192.168.1.103 is the ip of LAPTOP

    Anyone have any insights?

    cheers:)
     
  4. roadkill

    roadkill Super Moderator Staff Member Member

    I would try to isolate the problem first try without the script first just to know if it is interfering with something - I don't think so but try anyway.
    master browser thing is fairy normal.
    have you changed anything in your wireless settings?
     
  5. ericren23

    ericren23 LI Guru Member

    Im testing it without the script atm. But if it works without the script, its still a no no, because i need it to limit my internet bandwidth.

    For the DROP IN=vlan1 problem, what exactly is my router doing??? I've setup WallWatcher to log the traffic, i get a bunch of these DROP INs every 1-2min. There must be something going on here. It does that even with the wireless off. Very strange
     
  6. mikester

    mikester Network Guru Member

    It can be a tricky problem to solve - lots of variables.

    10.25.128.1 is a reserved address - try googling "iana.org blackhole server". You may need to check your DNS settings.

    What are your settings on the router? (/advanced-wireless.asp)

    BTW have you checked the signal strengths? I prefer using tools like Netstumbler for viewing all the available networks, security, encryption, blah, blah

    Things to try:
    * change encryption (start by turning it off for testing and going up from there)
    * shorten preamble, go to fixed transmission rates, etc.

    If all else fails this may be of use:
    http://www.microsoft.com/athome/moredone/wirelesstips.mspx

    Just out of curiosity are you by chance running Vista? I recall hearing some issues with how it handles wireless and an unstable "auto adjust settings" mode.
     
  7. ericren23

    ericren23 LI Guru Member

    hi mikester,

    my wireless advanced settings are all on default apart from Transmit Power, which is set to 150mW

    the strange 10.25.128.1 appears even if wireless is turned off, which is very strange.

    My wireless comp is running winXP SP2. Only 1 computer on the network, a wired computer is using vista.

    From the error:
    19:20:39 user.warn kernel: DROP IN=vlan1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:05:9a:d5:88:a8:08:00:45:00:01:4e SRC=10.25.128.1 DST=255.255.255.255 LEN=334 TOS=0x00 PREC=0x00 TTL=255 ID=39066 PROTO=UDP SPT=67 DPT=68 LEN=314

    the source is 10.25.128.1 while destination is 255.255.255.255 which are all oddballs.

    The signal quality and strength seem to be good too, atleast from within windows. I'll tryout netstumbler in a sec and report back on that. Shouldnt be a signal problem though. considering that i'm at most 5m from my router. Also, when my wireless goes funny, windows still shows the network as connected. and sending packets, only it doesnt seem to receive any.

    thanks for all the suggestions!
     
  8. Sunspark

    Sunspark LI Guru Member

    You're 5 metres from your router and you need a transmit power of 150 mW?

    I lowered mine to 28 mW.
     
  9. azeari

    azeari LI Guru Member

    try lowering the transmit power. transmit powers above 100 usually increases noise in the signal, which might be a probable cause of the problems you're getting.
     
  10. mikester

    mikester Network Guru Member

    Here's some interesting threads for you on out-of-box Vista affecting DHCP stack etc.

    http://channel9.msdn.com/ShowPost.aspx?PostID=165687

    http://news.softpedia.com/news/Troubleshoot-and-Resolve-Windows-Vista-Network-Problems-55692.shtml

    http://windowshelp.microsoft.com/Windows/en-US/help/33307acf-0698-41ba-b014-ea0a2eb8d0a81033.mspx

    http://forums.whirlpool.net.au/forum-replies-archive.cfm/558697.html

    Try turning the vista machine off, reboot the router, then see if the problem persists...

    My first instinct would be to kill all the vista processes and services relating to automatic network configs (i.e. make sure DHCP server is shut off on the vista box) and all the plug-n-play crap.

    You may even want to consider going to static DNS on the tomato and adding 4.2.2.3 to the top of your DNS list. Going static IP on your networked boxes will probably help too.

    Good luck, have fun!
     
  11. ericren23

    ericren23 LI Guru Member

    Wow thanks everyone!

    Firstly its not a transmit power problem. tried lowering that and still no go.

    @mikester, atm im on static ip address. From the links you have sent, vista could very well be the curpit. I remember getting rid of dodgy network stuff like the Link-Layer Topology Discovery and also tcp/ipv6 and also disabling differential compression too. Turns out somehow the DHCP services is still active, eventhough i remember disabling it. Just turned it off. Also turned off upnp. not sure about the following services though:
    network connections
    network list service
    network location awareness
    network store interface

    I'll try shutting down those too and see what happens. I'll also try out shutting down the vista box.

    I'm not too sure about how to set up the static DNS thing. My network knowledge is limited to ip addresses. Can you extrapolate what you mean by: "going to static DNS on the tomato and adding 4.2.2.3 to the top of your DNS list"

    Atm, in my tcp/ip properties, ive manually set the ip address of my clients. left the subnet mask on 255.255.255.0 and default gateway 192.168.1.1 and preferred DNS server 192.168.1.1 too


    cheers!
     
  12. mikester

    mikester Network Guru Member

    look under /basic-network.asp and add 4.2.2.3 under LAN -> static DNS
     
  13. ericren23

    ericren23 LI Guru Member

    I have some leads to the strangeness!
    I posted a msg on whirlpool, on the OptusCable forum. This is one of the reply:

    10.25.128.1

    That is the IP of the CMTS interface you're connected to (which is why it appears in traceroutes, etc.). The cable network consists of both the public Internet, of which your computer has an IP, and a private network between the CMTSs and the cable modems.

    PROTO=UDP SPT=67 DPT=68

    This is a BOOTP or DHCP packet.

    Is that being logged on the router itself, or on something behind the router? Either way it means your router is not consuming the packet, which means you may be having trouble maintaining a constant public IP address.

    Your router is running a DHCP client -- that's how it gets the public IP in the first place -- so I would have expected it to accept those packets.

    Unfortunately the log line doesn't say what sort of DHCP packets they are. Half-way through the IP lease the DHCP client is supposed to renew it. You could be seeing the "return" packets from the renewal. Since they're being dropped before the client actually gets them, it retries again and again. The DHCP server will think the client has received the responses, so your IP will remain allocated to you, so it could just work out alright in the end. But it's still something that should be fixed.

    Now, since everyone is tomato here. Are those packets meant to be accepted? or is this actually normal for a cable network???

    If its not normal, how do i let the linksys accept those packets instead of dropping them??

    cheers
     
  14. mikester

    mikester Network Guru Member

    To trace the packets (source/destination and content) you need to use a tool like wireshark/ethereal.

    10.25.128.1 is not an internet IP and the calls are being generated somewhere on your network - possible sources? Trojan/virus/worm, poorly configured networked PC (a.k.a. Vista).

    Try clearing your Vista IPCONFIG after all the "utilities" have been shut down.

    ipconfig /flushdns
    ipconfig /release
    ipconfig /renew
    ipconfig /all

    Do the log mesgs stop when the Vista box is removed from the network?
     
  15. ericren23

    ericren23 LI Guru Member

    @mikester,

    The 10.25.128.1 is not due to vista. Its still there with the vista box shut off. It's there pretty much all the time. Even if all the pcs are off. I tried unpluging everything on my lan, except the link from cable modem to router, and it seems to be there still.

    Tried all the ipconfig stuff already.

    As someone has said:
    That is the IP of the CMTS interface you're connected to (which is why it appears in traceroutes, etc.). The cable network consists of both the public Internet, of which your computer has an IP, and a private network between the CMTSs and the cable modems.

    Could it all be due to the cable modem?
    I tried doing a tracert and this is what i get:

    Code:
    Tracing route to www.l.google.com [72.14.253.103]
    over a maximum of 30 hops:
    
      1    <1 ms    <1 ms    <1 ms  unknown [192.168.1.1]
      2     8 ms     7 ms    10 ms  [COLOR="Red"]10.25.128.1[/COLOR]
      3    10 ms     8 ms     7 ms  bla3-ge1.gw.optusnet.com.au [211.28.108.2]
      4     9 ms     9 ms     8 ms  mas1-ge0-1-900.gw.optusnet.com.au [198.142.144.2
    54]
      5    12 ms     9 ms     9 ms  sbr3-ge5-0-0-811.gw.optusnet.com.au [211.29.155.
    12]
      6   165 ms   181 ms   177 ms  203.208.148.225
      7   165 ms   165 ms   167 ms  ge-4-0-0-0.plapx-dr2.ix.singtel.com [203.208.149
    .6]
      8   165 ms   165 ms   165 ms  72.14.197.165
      9   166 ms   169 ms   167 ms  209.85.130.6
     10   181 ms   181 ms   186 ms  66.249.95.135
     11   192 ms   183 ms   183 ms  72.14.233.37
     12   183 ms   183 ms   182 ms  209.85.250.65
     13   182 ms   184 ms   193 ms  72.14.233.14
     14   182 ms   183 ms   183 ms  po-in-f103.google.com [72.14.253.103]
    
    Trace complete.
    
     
  16. mikester

    mikester Network Guru Member

    looks like you found it!
     
  17. ericren23

    ericren23 LI Guru Member

    yep! now i know what it is, but i dont know if i should allow it through, or how i should allow it through.

    I think my wireless is due to the vista rig on the network, ive pretty much disabled every useless service/component and it seems to be run good now.
     
  18. canis

    canis Network Guru Member

    Authentication problem. Switch "Authenticate Mode" to "Shared Key". Should work.
     
  19. ericren23

    ericren23 LI Guru Member

    The wireless problem seems to be resolved now, after turning off all the vista stuff. Also i reset my router just to be safe. running good for the past 2 days! thanks everyone!

    cheers :)
     

Share This Page