Sporadic Disconnects

Dear Readers,

For the past month... For some strange reason my Internet connection dies out on me...

I mean... My comptuer is supposedly the 'Host' as I am using SBC Yahoo DSL with a DI-604 Router... and so then I assume my Computer is the Host while my Sisters/ is just another Computer sharing the connection... Yet... For some reason every now and then (No pattern/ just random timing) MY computer will die and lose connection/ when I try to repair the Connection it cannot renew my IP Address. Also the Disconnects last from a range of a minute to 5 minutes... Also I tried switching the Ethernet Cables and that didn't do anything, so I actualyl went out to buy a new one from GeekSquad and THOUGHT that fixed the problem on the first day, but the next day bam the problem returned...

Whenever my Connection is dropped... My Sisters is still active and runs normally.. So I am not sure if it is My computer or the Router that is causing the problem.

I am not sure if I have provided enough information to get me anywhere, but if anyone can help me out that would be greatly appreciated.. And if you need more information do ask, thank you.

Does your sisters computer have the same problem at different times or does it work ok allt he time?

Do you have a third party personal firewall installed?

What OS?

Assuming XP, control panel->administrative tools->event viewer->system
any network related error at the times of the itnernet not working?

uhhhmmm...have you looked into your router's documentation?
may be a clue in there
I know nada about your router so can't really say what it may be
now if you were on a Belkin router I might have had a clue :P
(I think I'm the only one in here that has a Belkin :( )

Ok as far as answering questions:
@zaphodiv: My Sisters computer works 24/7 and has no problems...., I do have a Third Party Personal Firewall (BitDefender Pro 9), OS: WinXP Pro

Well for the Internet thingy.. When it does 'disconnect' under my NetWorks.. The Gateway(Router) connection disappears and only my 'LocalAreaConnection' Remains.. But when I try to repair I get:"Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 000FEAFB2CA2. The following error occurred:
The semaphore timeout period has expired. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server."(That is from that Event Log)


@fkdup74: Let me post a LONG log as I not really sure how to 'read' it:


Dec/10/2005 11:46:27 DHCP lease IP 192.168.0.101 to chris-9e064d42100-04-61-48-20-55
Dec/10/2005 11:31:51 get Time successful
Dec/10/2005 10:42:53 add_route: rejected null parm; dest: 00000000, mask: FFFFFFFF Dec/10/2005 10:42:53 dtrap(44) - needs breakpoint
Dec/10/2005 10:42:47 add_route: rejected null parm; dest: 00000000, mask: FFFFFFFF Dec/10/2005 10:42:47 dtrap(44) - needs breakpoint
Dec/10/2005 10:42:44 add_route: rejected null parm; dest: 00000000, mask: FFFFFFFF Dec/10/2005 10:42:44 dtrap(44) - needs breakpoint
Dec/10/2005 10:31:51 get Time successful
Dec/10/2005 09:31:51 get Time successful
Dec/08/2005 14:29:37 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/08/2005 13:31:19 get Time successful
Dec/08/2005 12:31:19 get Time successful
Dec/08/2005 11:31:19 get Time successful
Dec/08/2005 10:49:19 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:49:16 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:49:13 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:49:10 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:48:02 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/08/2005 10:42:20 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:18 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:17 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:15 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:14 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:12 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:10 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:41:12 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/08/2005 10:31:16 get Time successful
Dec/08/2005 09:31:13 get Time successful
Dec/08/2005 08:31:10 get Time successful
Dec/08/2005 07:31:09 get Time successful
Dec/08/2005 06:31:09 get Time successful
Dec/08/2005 05:31:09 get Time successful
Dec/08/2005 04:31:09 get Time successful
Dec/08/2005 03:46:59 TearDrop Attack Detect84.158.31.2:5662469.224.226.98:48817Packet Dropped
Dec/08/2005 03:31:09 get Time successful
Dec/08/2005 02:31:08 get Time successful
Dec/08/2005 01:31:08 get Time successful
Dec/08/2005 00:31:08 get Time successful
Dec/07/2005 23:31:08 get Time successful
Dec/07/2005 23:00:05 Ping of Death Detect69.106.207.9:3355769.224.226.98:15298Packet Dropped
Dec/07/2005 22:46:52 dtrap(115) - needs breakpoint
Dec/07/2005 22:46:50 dtrap(115) - needs breakpoint
Dec/07/2005 22:31:07 get Time successful
Dec/07/2005 21:44:22 DHCP lease IP 192.168.0.101 to chris-9e064d42100-04-61-48-20-55
Dec/07/2005 21:42:24 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:40:44 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:35:31 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:35:28 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:34:23 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:34:14 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:34:11 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:33:42 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:33:33 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:33:29 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:32:55 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:32:47 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:32:42 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:32:04 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:31:56 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:31:53 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:30:58 get Time successful
Dec/07/2005 21:30:40 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2
Dec/07/2005 21:30:33 DHCP release IP 192.168.0.10000-0F-EA-FB-2C-A2
Dec/07/2005 20:30:58 get Time successful
Dec/07/2005 19:30:56 get Time successful
Dec/07/2005 18:30:56 get Time successful
Dec/07/2005 17:30:56 get Time successful
Dec/07/2005 16:30:56 get Time successful
Dec/07/2005 15:30:54 get Time successful
Dec/07/2005 14:30:54 get Time successful
Dec/07/2005 13:30:54 get Time successful
Dec/07/2005 12:30:53 get Time successful
Dec/07/2005 11:30:53 get Time successful
Dec/07/2005 10:30:53 get Time successful
Dec/07/2005 09:30:53 get Time successful
Dec/07/2005 08:30:53 get Time successful
Dec/07/2005 07:30:52 get Time successful
Dec/07/2005 07:21:05 SYN Flood Attack DetectPacket Dropped

From that log the router is receiving the requesst the renew the ip address.
The most likly explation is the computer is not correctly processing the reply.

I'm not familiar with bitdefender but I'v heard of personal firewall software causing DHCP renewals to fail.

As a workaround try giving your computer a static address. You need to
set the ip address, subnet mask and the dns server(s). Open a command prompt
and type ipconfig /all to get the info.

I think the problem is with your firewall.

Btw with a router there isn't a 'host' or 'shared'. All computers connected to the router have the same status.

@zaphodiv: I'll try that methood after this other one another forum suggested.. So I willupdate you on that if that method doesn't work.

@Virtualbody1234: Firewall.. I am currently using BitDefender Pro 9's FireWall and the only FireWall setting I have enabled is the Programs.. ANd I dnot see anything on the list that is Internet Related so dunnos...

ANd bleh yeah sorry about that Host/Shared thing forgot that the Router does serve as the Host.


Edit: @zaphodiv: Ok the other method didnt work so I tried yours... And is the IP Address + the DNS Address supposed to be the same? Because on my config /all it shows as the same.. Only different is on the ip address it ends with .100 and the DNS ends with .1

^This seemed to have made it so that I can barely visit any websites... So I am reverting back to the Dynamic IP rather than Static to test out another method.^


Uh OH... checked my Router Logs I gettinga lot of:

Dec/12/2005 13:12:38 Could not find invoker of ping 192.168.0.100
Dec/12/2005 13:12:38 Could not find invoker of ping 192.168.0.101
Dec/12/2005 13:11:38 Could not find invoker of ping 192.168.0.100
Dec/12/2005 13:11:37 Could not find invoker of ping 192.168.0.101
Dec/12/2005 13:10:37 Could not find invoker of ping 192.168.0.100
Dec/12/2005 13:10:36 Could not find invoker of ping 192.168.0.101
Dec/12/2005 13:09:36 Could not find invoker of ping 192.168.0.100
Dec/12/2005 13:09:36 Could not find invoker of ping 192.168.0.101
Dec/12/2005 13:08:36 Could not find invoker of ping 192.168.0.100
Dec/12/2005 13:08:35 Could not find invoker of ping 192.168.0.101

Quote:

---

Ok the other method didnt work so I tried yours... And is the IP Address + the DNS Address supposed to be the same?

---

No.

Quote:

---

Because on my config /all it shows as the same.. Only different is on the ip address it ends with .100 and the DNS ends wih .1

---

So the addresses are the same except that they are different?
I'm not quite sure what is going on in your brain there.
Do you think bears and dogs are the same because they are both
brown, furry and have four legs?

Get the ip address, netmask and default gateway setting from ipconfig /all
and enter them into controlpanel->local are network->propertys->tcp/ip->propertys->use the following ip address

Type in the addresses _exactly_ as shown by netstat. Do not use some different address that looks a bit like that one you are supposed to be using

IF it dosn't work then post _exactly_ what you did including the exact output of ipconfig and the exact addresses you used.

Well I accidently changed my router settings so that MY computer is now udner the Static DHCP Client List and then my Sisters computer changed to 'Unknown' as the name now... And things seemt o be working ok.. except for the fact that when i do anything online it sort of 'lags' a bit before processing the data.

And for your question.. I just mean that the IP's given like it would be 192.168.0.100 and another would be 192.168.0.1, is there really a difference in that? =X

Edit; Ok i did as you told me to and things seem to be working ok.. I mean... should I switch my Computer Name/Information back to the Dynamic IP DCHS Client List?

(Also how does one find out the MAC Address?)

Quote:

---

Originally Posted by LilAznAccommodator

And for your question.. I just mean that the IP's given like it would be 192.168.0.100 and another would be 192.168.0.1, is there really a difference in that? =X

---

Duh, does 100 = 1? Of course there's a difference. What's your house number? Is it the same as the people at the other end of the street? Tip: don't get a job as a postman.

Quote:

---

Originally Posted by LilAznAccommodator

(Also how does one find out the MAC Address?)

---

Ipconfig /all
Look at the physical address.

Ouch lynx... Just because I am not sure of an IP Address does not automatically label me as being bad with numbers... Just IP/Computer wise... Sheesh ><

And ironically.. thanks for the MAC thing.


EDIT: I formatted my computer and apparently that did not fix the problem ><

Sorry for the double post.. But then.. I realized that... If I am DIRECTLY connected to my DSL Modem... Sometimes it doesn't respond either...
And when I check the Status of my Connection... It has a VERY low SEnt Rate compared to the Recieved Rate: Example:

883,456Sent / 5,268,746Recieved

So dunno if that helps any...


Think it has to do with my BuiltIn Ethernet Port?

Quote:

---

Originally Posted by LilAznAccommodator

Sorry for the double post.. But then.. I realized that... If I am DIRECTLY connected to my DSL Modem... Sometimes it doesn't respond either...
And when I check the Status of my Connection... It has a VERY low SEnt Rate compared to the Recieved Rate: Example:

883,456Sent / 5,268,746Recieved

So dunno if that helps any...


Think it has to do with my BuiltIn Ethernet Port?

---

That's bytes (or packets) sent and received, not the speed. Since you receive far more data from the internet than you send (except when file sharing) the figures you show aren't surprising.

The problem is unlikely to be your ethernet port, they tend to either work or not work rather than work intermittently. The cabling is a much more likely prospect.

..

Try the boards here

http://bbs.adslguide.org.uk/

@Lynx: Well I actually BOUGHT a new Ethernet Cable and that didn't seem to solve the Problem... And also formatting my computer didn't work...

@hungrylilboy: Nope not running Protowall.

@Voetsek: I registered there and waiting for their reply... Thanks.

Good luck

Well I got lazy and went out to BUY a new Ethernet Card($10) .. And it seems to work... But it is weird when i surf on FireFox.. Sometimes it shows that it 'Stops' (Not responding) BUT then I can still chat on AIM normally.. so not sure...

Okay this problem is starting to annoy me again... I mean I tried Formatting my computer in hopes that it would solve the problem.. But it didn't... SO then as mentioned in my Above post.. I bought a new Ethernet Card and that also didn't solve it.. So I tried purchasing a new Ethernet Cord and again that didn't solve the problem.. So now I am thinking... Maybe it has to do with my MOtherboard, which I will not be buying a new one as I do not have that money at the moment... And I know it could be the Router that is causing only my computer to 'malfunction' every now and then, but not sure how to resolve that problem... So bleh.

Have you tried a different port on the router. :blink:

Quote:

---

Originally Posted by LilAznAccommodator

@fkdup74: Let me post a LONG log as I not really sure how to 'read' it:

Dec/08/2005 10:49:19 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:49:16 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:49:13 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:49:10 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:20 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:18 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:17 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:15 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:14 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:12 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 10:42:10 SYN Flood Attack DetectPacket Dropped
Dec/08/2005 03:46:59 TearDrop Attack Detect84.158.31.2:5662469.224.226.98:48817Packet Dropped
Dec/07/2005 23:00:05 Ping of Death Detect69.106.207.9:3355769.224.226.98:15298Packet Dropped
Dec/07/2005 07:21:05 SYN Flood Attack DetectPacket Dropped

---

^ this is what catches my eye, and I think:
a) your router is incorrectly interpreting normal traffic as attacks, or,
b) you were being attacked

could be part of the problem?

and your MAC addys are in the logs too :P

Quote:

---

Dec/07/2005 21:44:22 DHCP lease IP 192.168.0.101 to chris-9e064d42100-04-61-48-20-55
Dec/07/2005 21:42:24 DHCP lease IP 192.168.0.100 to chris-bdfd713b300-0F-EA-FB-2C-A2

---

simple breakdown....

(chris-9e064d421) (00-04-61-48-20-55)
the first part is the computer name/ID, the second part is the MAC addy

and....

Quote:

---

Dec/08/2005 03:46:59 TearDrop Attack Detect84.158.31.2:5662469.224.226.98:48817Packet Dropped

---

(84.158.31.2:56624) (69.224.226.98:48817)
the best I can make of this log entry is.....
84.158.31.2:56624 is the originating IP, port 56624
69.224.226.98:48817 is the destination IP (you), port 48817

@Rossco: By changing ports.. you just mean like switching the Ethernet Cables on the Router right? Cause I tried that with no difference.

@fkdup74: Ok for the last part of your entry... The one where you say: "'(84.158.31.2:56624) (69.224.226.98:48817)
the best I can make of this log entry is.....
84.158.31.2:56624 is the originating IP, port 56624
69.224.226.98:48817 is the destination IP (you), port 48817'"

^So... Should I be changing any of my settings because of those numbers?, since as of now I am running both computers on Static IP's(From Command Prompt> ipconfig /all)^

well, as I said, it could either be a mistake on your router's part,
or someone is really fucking with your network
were the times logged around the same times you were bumped from the network?

go into your router's configuration and check all your security settings
if you don't have it password protected, protect it
if you do, change it, make it something off-the-wall, something even you won't remember
(just be sure to write it down :P)
if your router offers MAC filtering, filter it
if it offers any kind of trusted client list, make that list
if it has any kind of ping blocking, you could enable that
etc, etc

Ok I shall do your last suggestion... Since I did see some sort of like Ping Blocking from WAN or something... So I shall Enable that and see if that helps. And when you say Password Protected you mean whenever I access 192.168.0.1 where I just login with admin as the name... Password that right?

There is not MAC Filtering of my knowing/ and that Trusted Client thing, unsure.

---Nvm found the MAC Filter.. and I just input the MAC Addresses of both computers on it right?

Quote:

---

Originally Posted by LilAznAccommodator

Ok I shall do your last suggestion... Since I did see some sort of like Ping Blocking from WAN or something... So I shall Enable that and see if that helps. And when you say Password Protected you mean whenever I access 192.168.0.1 where I just login with admin as the name... Password that right?

There is not MAC Filtering of my knowing/ and that Trusted Client thing, unsure.

---Nvm found the MAC Filter.. and I just input the MAC Addresses of both computers on it right?

---

yes. and yes. and....yes. :P

now mind you, this may or may not help, but it's where I would start
correct configuration is more important than most people realize I think
plug n play has spoiled the whole fuckin world :lol:

if you can rule out config issues, then still have problems, you can try moving on to a firmware update

-hint- take care in entering the MAC addys
if you enter a bad digit, you lose connectivity and may have to reset the router to factory default
not too big of a deal, but needless trouble none the less

-edit- nevermind the "trusted client" stuff
that was just a generic term, don't know wtf I said it, but I don't know your router, so...

Ok I have Blocking of WAN Ping, and enabled a Password on my Login along with did the MAC Address Filtering.

Will post updates when given.