(Sorry mods if this is the wrong place to put this, please forive me and move to where it belongs ) I live in a student house and we recently got a new housemate. Almost as soon as he connected to our network I have been losing conection every minute or so for a split second. This may not sound like much but it causes online gaming to lag (or kicks me from servers ie league of legends) and stops all chrome downloads, making it impossible to download pictures, games, any files needed for work. My housemate denies using any p2p software and I obviously have no right to force him to prove this. Is this a problem that he may be causing? Is there a fix to it. Whenever my housemate leaves the network everything is fine and I have no interruptions. Desperately in need of help, as most of my spare time is spent gaming/working/talking to friends online and without being able to do so I'm a little lost. Thank you in advance. Connar.
Here? Wired or wifi? Which OS are you both using? Same for router and network cards. If your router is a bit advanced, it should have a system log viewable through the web interface. Anything coming up in there? Also check your system log in event viewer (right click My Computer/Computer and select Manage and this will open upon Computer Management, you will find the event logs through the menu on the left under system tools ).
Thank you for moving it This is wifi. It happens on both my windows 7 and mac osx 10.6 partition. Network car: ATheros AR938X Wireless Network Adaptor It is a Brightbox wireless router. Some of the system log from my router " Sun Apr 28 01:37:11 2013 admin login success from 192.168.1.57 Sun Apr 28 01:22:31 2013 admin timeout from 192.168.1.57 Sun Apr 28 00:31:51 2013 PPP connection up (VC1) Sun Apr 28 00:31:49 2013 PPP: IPCP up Sun Apr 28 00:31:49 2013 PPP: IPCP sending CONFREQ Sun Apr 28 00:31:49 2013 PPP: IPCP received CONFACK Sun Apr 28 00:31:49 2013 PPP: IPCP received CONFNAK Sun Apr 28 00:31:48 2013 PPP: IPCP sending CONFREQ Sun Apr 28 00:31:48 2013 PPP: IPCP received CONFREJ Sun Apr 28 00:31:48 2013 PPP: IPCP sending CONFACK Sun Apr 28 00:31:48 2013 PPP: IPCP received CONFREQ Sun Apr 28 00:31:48 2013 PPP: IPCP sending CONFREQ Sun Apr 28 00:31:48 2013 PPP: CHAP authentication succeeded Sun Apr 28 00:31:48 2013 PPP: LCP up Sun Apr 28 00:31:48 2013 PPP: LCP received CONFACK Sun Apr 28 00:31:48 2013 PPP: LCP sending CONFACK Sun Apr 28 00:31:48 2013 PPP: LCP received CONFREQ Sun Apr 28 00:31:47 2013 PPP: LCP sending CONFREQ Sun Apr 28 00:31:47 2013 PPP: Starting daemon Sun Apr 28 00:31:42 2013 WAN link up (ADSL) Sun Apr 28 00:31:21 2013 PPP connection down (VC1) Sun Apr 28 00:31:21 2013 PPP: LCP sending TERMREQ Sun Apr 28 00:31:21 2013 PPP: Stopped daemon(0,1,5) Sun Apr 28 00:31:21 2013 PPP: IPCP down Sun Apr 28 00:31:20 2013 PPP: LCP down Sun Apr 28 00:31:20 2013 WAN link down (ADSL) Sat Apr 27 23:45:05 2013 Possible DoS attack detected from 192.168.1.154(c0:18:85:5c:fe:2b) Sat Apr 27 23:44:19 2013 PPP connection up (VC1) Sat Apr 27 23:44:17 2013 PPP: IPCP up" But the connection dropped many more times than that I don't have the information from my housemate, he isn't exactly the agreeable kind
"Sat Apr 27 23:45:05 2013 Possible DoS attack detected from 192.168.1.154" <-- is that your flatmate's IP? Does this time coincide with it going down? Or is it this "Sun Apr 28 00:31:20 2013 WAN link down (ADSL)"?
That IP isn't used by anybody, and it goes down in roughly 1-4 minute intervals. The DoS attack does appear regularly though as well as the WAN link down
If he is playing online then you are probably dropping your connection due to bandwidth available. You need a better service provider or more expensive package if your ISP (internet service provider) can provide it.
So, what I'm asking is does either event coincide with you losing access? Also, what's the uptime on the router after you lose access?
I've figured out that it is the new housemate on 192.168.1.25 every time a DoS attack appears on the log I lose connection. here is a small snippet form the other day. What do I do from here? System Log Tue Apr 30 17:16:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:16:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:16:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:16:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:16:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:16:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:58 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:58 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:48 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:18 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:08 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:08 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:08 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:08 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:08 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:08 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:08 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:08 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:08 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:11:08 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:10:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:10:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:10:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:10:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:10:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:10:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:10:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:10:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:10:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:10:39 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:47 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:47 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:37 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:27 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:17 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:17 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:05:17 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:00:05 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14) Tue Apr 30 17:00:05 2013 Possible DoS attack detected from 192.168.1.25(20:16:d8:af:e9:14)
Well, if we work on the basis that he isn't intentionally doing anything bad, then it's possible a conflict is going on. How many network connected devices (phones, tablets, laptops, media streamers, PCs, etc - anything at all that uses the wifi connection, even if it's not accessing the internet) do you and your flatmate have (connected) when it happens? Are they all using DHCP (IP details are automatically allocated) or do any of them have a manual configuration (IP details have to be manually entered)?
Well right now on me router there is just me 192.168.1.57 and my housemate 192.168.1.25 and I am getting the same problem as before, however when checking the router system log, no attacks are showing at all. The problem only happens when he is online though, not when any other devices are connected, just happens as soon as he connects to the internet
The DDOS error could have been due to another device configured with the same IP address. In fact, it could potentially cause issues like you're experiencing. By lose connection do you mean that you lose connection to the wifi router (watch the system tray icon for wifi) or does it show as connected but their is no data activity? Also, after it happens, look in the Windows event log (system one) to see if there are any errors (or service restarts).
The only thing connected was my pc and his. The system tray icon doesn't change at all, the reasons I know the connection has dropped are; because youtube videos stop loading and have to be restarted, google chrome downloads (pictures, videos, files etc) stop and have to be restarted from scratch or the game I play a lot (League of Legends) gives me an on screen prompt which says "you have been disconnected from the pvp.net server" and I have to restart the whole game or I can't play. This is what has come up over a thousand times on my system log Log Name: System Source: amdkmdag Date: 03/05/2013 02:28:51 Event ID: 62464 Task Category: DVD_OV Level: Information Keywords: Classic User: N/A Computer: [my computer] Description: UVD Information Event Xml: <Event xmlns="WONTLETMEPOSTTHECOMMENTWITHTHISLINKHERE"> <System> <Provider Name="amdkmdag" /> <EventID Qualifiers="16384">62464</EventID> <Level>4</Level> <Task>61</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2013-05-03T01:28:51.716234400Z" /> <EventRecordID>465537</EventRecordID> <Channel>System</Channel> <Computer>Connar-PC</Computer> <Security /> </System> <EventData> <Data> </Data> <Binary>00006000010000003D00000000F40040000000000000000000000000000000000000000000000000FFFFFFFF00040658030000000A000000000000000FFD7D0000803E003C000000000000000300000003000000000000000300000003000000000000000300000003000000000000000300000000000000000000000005040000803E003C000000</Binary> </EventData> </Event> No idea what any of that means. Should I be looking for anything else? I'd also like to thank you now for all the help you have given me so far on this
That looks like it's from your graphics card driver and as it happens on Windows 7 and Mac OS X, it would be odd to be the cause. The drivers are probably just dated. I'm assuming your flatmate is using wireless, too. I'm also assuming that his connection is solid throughout the whole time. Do you have an Android or iPhone? There's an app called Wifi Analyzer and you can use it to to see if the channel your router is using is heavily congested. Also, have you tried a wired connect to see if the same happens then? Do you have a consistent signal strength at all times? How many bars is it rated as (the little green signal strength meter)? By the way, are you just using Windows Firewall or something else? It would be worth checking the logs to see if it detects any at the time you lose connection.
Yes he is indeed using wireless. I am on the best channel for my router, but am unable for the time being to check the wired connection. On my pc it seems the signal strength doesn't fluctuate at all, but using wifi analyzer it drops a little from time to time whilst he is online. I did just have Windows Firewall, but I renewed my Kaspersky licence today, think that may help at all?
Hopefully, if it's something incoming it will automatically filter it out. I would recommend blocking his IP, though, and see if there's a difference after that.
Blocking his IP gets rid of the problem completely, but obviously that isn't a solution. As soon as I unblock him the problems start all over again
If the Kaspersky log reveals nothing of use (when he's unblocked) use something like SmartSniff to see any connections made to/from him at the time. It should reveal the cause.
bro just check your friend is he downloading every time if he is then your speed loses and that the prob. another prob with your system may be infected try to reset your system dns