Connection drops

[#1]

Hello, as with many other customers I have been experiencing consistent drops in my connection for the past few days and saw little point in reporting it until it was officially fixed as of today iirc. However I am still experiencing small disconnections which can result up to a 3 minutes which really does affect the keen streamer like myself which results in gaming matches unplayable as the slightest disconnection will kick you out.
Here below is a log of my router which I can see many erros which I'm hoping you'll know more than me.  

Warning Aug 31 16:10:57 IDS scan parser : tcp port scan: 212.56.73.96 scanned at least 10 ports at 87.X.X.X. (1 of 1) : 212.56.73.96 87.115.129.217 40 61 TCP 80->51984 [...R..] seq 2538004303 ack 0 win 0

Info Aug 31 16:10:50 CONFIGURATION saved by TR69

Info Aug 31 16:10:35 FIREWALL event (1 of 1): modified rules

Info Aug 31 16:10:35 FIREWALL event (1 of 1): created rules

Warning Aug 31 16:10:35 PPP link up (Internet) [87.115.129.217]

Info Aug 31 16:10:35 FIREWALL event (1 of 2): deleted rules

Info Aug 31 16:10:35 PPP CHAP Receive success (Internet)

Info Aug 31 16:10:35 PPP CHAP Receive challenge from rhost PCL-AG08 (Internet)

Info Aug 31 16:10:34 PPP CHAP Receive challenge from rhost ERX9.Sheffield2 (Internet)

Info Aug 31 16:09:32 FIREWALL event (1 of 2): modified rules

Info Aug 31 16:09:32 FIREWALL event (1 of 2): created rules

Warning Aug 31 16:09:32 PPP link down (Internet) [87.114.240.187]

Info Aug 31 16:08:35 CONFIGURATION saved by TR69

Warning Aug 31 16:08:20 PPP link up (Internet) [87.114.240.187]

Info Aug 31 16:08:20 FIREWALL event (1 of 21): deleted rules

Info Aug 31 16:08:19 PPP CHAP Receive success (Internet)

Info Aug 31 16:08:19 PPP CHAP Receive challenge from rhost PCL-AG06 (Internet)

Info Aug 31 16:08:18 PPP CHAP Receive challenge from rhost ERX9.Sheffield2 (Internet)

Info Aug 31 16:08:10 FIREWALL event (1 of 33): modified rules

Info Aug 31 16:08:10 FIREWALL event (1 of 51): created rules

Warning Aug 31 16:08:10 PPP link down (Internet) [91.125.173.171]

Info Aug 31 16:07:53 LOGIN User admin logged in on [HTTP] (from 192.168.1.66)

Info Aug 31 16:05:45 LOGIN User admin tried to login on [HTTP] (from 192.168.1.66)

Warning Aug 31 15:52:29 IDS proto parser : tcp null port (1 of 1) : 123.151.42.61 91.125.173.171 40 48 TCP 12203->0 [S.....] seq 411257145 ack 0 win 8192

Error Aug 31 15:52:28 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 95.90.197.86 Dst ip: 91.125.173.171 Type: Destination Unreachable Code: Port Unreacheable

Error Aug 31 15:50:18 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 203.190.48.29 Dst ip: 91.125.173.171 Type: Destination Unreachable Code: Net Unreacheable

Info Aug 31 15:34:28 SNTP Synchronised to server: 212.159.13.50

Error Aug 31 15:03:45 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 179.83.184.98 Dst ip: 91.125.173.171 Type: Destination Unreachable Code: Port Unreacheable

Error Aug 31 14:55:44 FIREWALL icmp check (1 of 2): Protocol: ICMP Src ip: 180.137.114.98 Dst ip: 91.125.173.171 Type: Destination Unreachable Code: Port Unreacheable

Error Aug 31 14:52:03 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 85.235.38.142 Dst ip: 91.125.173.171 Type: Time Exceeded Code: Time to Live exceeded in Transit

Error Aug 31 14:35:35 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 38.82.221.208 Dst ip: 91.125.173.171 Type: Destination Unreachable Code: Communication with Destination Host is Administratively Prohibited

Info Aug 31 14:34:28 SNTP Synchronised to server: 212.159.6.9

Thanks in advance for your help.
adie:green redacted IP address

[#2]

Hi there,
Firstly the "Error"s that you are seeing is not an error in the sense you are thinking, similarly the Warning IDS proto parser. It's simply a case of the Source IP (Src ip:) trying to send packets to your previous IP address 91.125.173.171. They are usually pings and port scans some of which could be more malicious, which is why you should always have an active firewall. Most connections get these, it's nothing unusual to you.
However your list also contains your current IP address at 87.115.xxx.xxx and current IP addresses should be redacted in future postings. Your old one is no longer relevant.
Next a question, did you get your firmware updated OK? This could be important.
The important bits in the log that we need to be looking for are the PPP link down and PPP link up events, but especially any xDSL linestate down & up events.
The 3 minutes may involve re-establishing a DSL connection as well as waiting for the PPP to come up (which may involve waiting for a stale session to timeout).
When you are looking at these logs, make sure that you have got "All" selected in the drop-down box at the top of the page.

[#3]

This is a copy of the router logs under all results:
FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 41.78.165.100 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Info Sep 1 18:37:27 LOGIN User admin logged in on [HTTP] (from 192.168.1.66)

Info Sep 1 18:34:31 SNTP Synchronised again to server: 212.159.6.9

Error Sep 1 18:31:32 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 96.251.15.52 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Error Sep 1 18:18:34 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 179.32.194.117 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Error Sep 1 18:09:45 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 189.84.231.33 Dst ip: 87.115.129.217 Type: Time Exceeded Code: Time to Live exceeded in Transit

Error Sep 1 18:00:02 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 177.216.64.15 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Error Sep 1 17:48:26 FIREWALL icmp check (1 of 2): Protocol: ICMP Src ip: 125.67.245.184 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Error Sep 1 17:44:59 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 216.0.55.10 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Info Sep 1 17:34:31 SNTP Synchronised again to server: 212.159.6.9

Error Sep 1 17:22:43 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 71.101.107.180 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Error Sep 1 16:53:26 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 202.151.73.188 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Error Sep 1 16:46:01 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 88.84.212.170 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Info Sep 1 16:34:31 SNTP Synchronised to server: 212.159.6.9

Error Sep 1 16:09:17 FIREWALL icmp check (1 of 2): Protocol: ICMP Src ip: 151.237.124.86 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Error Sep 1 16:07:41 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 91.214.0.129 Dst ip: 87.115.129.217 Type: Time Exceeded Code: Time to Live exceeded in Transit

Error Sep 1 16:00:23 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 191.15.105.244 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Error Sep 1 15:44:57 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 221.15.101.245 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Info Sep 1 15:34:31 SNTP Synchronised again to server: 212.159.13.49

Error Sep 1 15:13:35 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 110.187.88.9 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Info Sep 1 14:34:31 SNTP Synchronised again to server: 212.159.13.49

Error Sep 1 14:29:37 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 109.82.224.28 Dst ip: 87.115.129.217 Type: Destination Unreachable Code: Port Unreacheable

Warning Sep 1 14:21:40 IDS proto parser : tcp null port (1 of 1) : 123.151.42.61 87.115.129.217 40 40 TCP 12208->0 [S.....] seq 66445554 ack 0 win 8192

I did get my firmware updated absolutely fine from your end and noticed a very stable line up until the last couple of days since the issues with the broadband on the status page occurred.

Again; thanks for your response.

[#4]

OK, nothing of interest in that selection. The problem with this version of the log viewable in the GUI, is it has a very limited number of entries and only shows the most recent. Next time you notice a drop, that will be the time to look at the log.
If we are seeing xDSL entries this won't be related to the network problems last Friday. Keep an eye on the modem/router LEDs as well. If the Broadband light is flashing, there should be xDSL entries in the log.

[#5]

Morning Rmusson,
Are you still seeing problems? Yesterday the connection seemed to be much better but its worth keeping an eye on.
<img src="http://community.plus.net/visualradius/generated/image14096480075849.png"/>
Many thanks,
Dan

[#6]

Thanks for investigating my issue, I have been at work today and have left my internet unused for about 10 hours just to see if it would make a difference, I have also disconnected / connected the ethernet cable from the test socket which has always been used to see if there was any noticeable damage to the cable which there isn't. Despite these efforts to try fix the issue myself I am unable to play a complete online game without a disconnection every 3 seconds; making it unplayable. I have found that webpages seem to work fine so I can't quite put my finger on the issue.
As for what Anotherone said "The problem with this version of the log viewable in the GUI, is it has a very limited number of entries and only shows the most recent. Next time you notice a drop, that will be the time to look at the log."
I have been looking at the log closely in the windows of these contant mini disconnections and unfortunately no error message outside what I have shared already in the thread has appeared.
jim:quote

[#7]

A disconnection every 3 seconds, that sounds like something very odd. It's not your connection, certainly not an issue with a connection to the exchange, it can't disconnect and connect that quickly and there would be xDSL entries in the log. And the Radius log would show something if your PPP session was going. The fact that normal browsing is OK supports that.
I did think of something like a DDOS attack, but no log entries support that either.
Do you only find this when playing that game? Is there any other games you play where you notice it?
The game where you notice it, is it hosted by another player and is it the same player when you have these problems?

[#8]

the same thing happens for different games on different platforms which causes frustration as the router cannot pickup any faults as you've stated.
Games of which I play on include VPS hosted games on my PC and player hosted on my console(s); both of which have resulted in the same micro disconnections making them equally unplayable.

[#9]

So this sounds purely like a Games related issue rather than anything to do with your connection as such. Exactly how long has this been happening?
I'm assuming that any settings needed for your games have been done in the Modem/Router Firewall? You haven't perchance reset the Modem/Router and forgotten to redo the settings? - might be worth checking them anyway.

[#10]

Quote from: Anotherone

So this sounds purely like a Games related issue rather than anything to do with your connection as such. Exactly how long has this been happening? I'm assuming that any settings needed for your games have been done in the Modem/Router Firewall? You haven't perchance reset the Modem/Router and forgotten to redo the settings? - might be worth checking them anyway.

I ran a debug on my internet connection whilst I was experiencing the intermittent disconnections.
Here are the results which I got:
http://pastebin.com/yKSvza4P

During most of Netalyzr's execution, the client continuously measures the state of the network in the background, looking for short outages. During testing, the client observed 13 such outages. The longest outage lasted for 2.0 seconds. This suggests a general problem with the network where connectivity is intermittent.
I believe the issue is my internet is disconnecting but when loading webpages and such it would be unnoticeable due to the length of the disconnections rather than it not affecting it at all which I had stated in my earlier post.

[#11]

I have no doubt that your problem is not like the "many other customers that are experiencing consistent drops".
Most people that come here reporting drops are having problems with their DSL connection, but I can't so far see any evidence of that.
My suspicion is that this is more involved than meets the eye.
One thing we haven't seen that could be useful is stats. Can you post the Full DSL stats, the link gives you the login screen first. Just do a copy and paste.
One of the things I noticed from the Netalyzr test was the packet loss "We recorded a packet loss of 10%. This loss is very significant and will lead to serious performance problems. It could be due either to very high load on our servers due to a large number of visitors, or problems in your network. Of the packet loss, at least 10.0% of the packets appear to have been lost on the path from your computer to our servers."
This does seem bad.
What time of day did you run this test?
Could you goto http://www.pingtest.net/ and run that, letting it choose the server. You will need Java enabled for this test.
If you copy the forum link and paste it into a post you will get a result similar to this below.

When you ran the Netalyzr test, were you using Wifi at the time?

[#12]

Uptime: 2 days, 6:28:14
DSL Type: ITU-T G.992.1
Bandwidth (Up/Down) [kbps/kbps]: 448 / 4,704
Data Transferred (Sent/Received) [MB/GB]: 878.50 / 4.17
Output Power (Up/Down) [dBm]: 12.1 / 19.4
Line Attenuation (Up/Down) [dB]: 31.5 / 50.5
SN Margin (Up/Down) [dB]: 22.0 / 4.8
System Vendor ID (Local/Remote): TMMB / ----
Chipset Vendor ID (Local/Remote): BDCM / TSTC
Loss of Framing (Local/Remote): 0 / -
Loss of Signal (Local/Remote): 0 / -
Loss of Power (Local/Remote): 0 / -
Loss of Link (Remote): -
Error Seconds (Local/Remote): 138 / -
FEC Errors (Up/Down): 5 / 118,509
CRC Errors (Up/Down): 5 / 354
HEC Errors (Up/Down): - / 1,439
.


This was using Wi-Fi and my signal strength is always 98 - 100%
The disconnections can vary with time, but generally they occur most constantly during peak time hours however it has been outside of that time window on a few occasions
Note: This data was during a gap between the disconnections; I will try collect the same data when experiencing the disconnections as it may show the cause of the issue in hand.
Thanks again for your help.
adie:quote

[#13]

OK, but next time you see the issue, immediately do the checks again with your computer connected to the modem/router by ethernet cable.
We need to establish if this is something affecting your broadband connection or your wireless connection.
Also note the Netalyzr comment about packet loss "It could be due either to very high load on our servers" so you may have to run further tests again at off-peak times.
Another question, so we can make sure you are going to get the best from your connection - do you have any extension sockets and where is the modem/router connected at present?

[#14]

Uptime: 1 day, 14:38:35
DSL Type: ITU-T G.992.1
Bandwidth (Up/Down) [kbps/kbps]: 448 / 4,352
Data Transferred (Sent/Received) [GB/GB]: 1.29 / 5.49
Output Power (Up/Down) [dBm]: 12.1 / 19.1
Line Attenuation (Up/Down) [dB]: 31.5 / 51.0
SN Margin (Up/Down) [dB]: 21.0 / 6.9
System Vendor ID (Local/Remote): TMMB / ----
Chipset Vendor ID (Local/Remote): BDCM / TSTC
Loss of Framing (Local/Remote): 0 / -
Loss of Signal (Local/Remote): 3 / -
Loss of Power (Local/Remote): 0 / -
Loss of Link (Remote): -
Error Seconds (Local/Remote): 1,051 / -
FEC Errors (Up/Down): 3 / 26,027
CRC Errors (Up/Down): 3 / 70
HEC Errors (Up/Down): - / 487




Big difference here and glad I had the opportunity to grab the data at the time.
To address your other questions, I do not have an extension socket.  my router which is directly downstairs or in the same same room as it on occasions is connected to the test socket at the moment.
I did this test at  5:50PM 7/9/14

[#15]

Something certainly amiss there, but also you have had a loss of sync & going by the timings on your posts it would have been about 0300 or just after on the 6th.
Can you run the ping test again? If you didn't do it last time, let the tester choose it's own server. If you can also post back what Firmware version your modem/router is and whether it has a USB socket?