NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Gap in logs?
I was notified by my ISP that they believe there was a copyright infringement on my IP address on 12/25/2018. When I look at the logs I see a huge gap. I see today 12/27 and then it goes to 12/10. Is this normal or should I be concerened? Also are the add_nat_rule entries normal as I am the only admin and have not been making any changes to the router.
[admin login] from source 192.168.1.19, Thursday, December 27, 2018 08:59:12
[DHCP IP: 192.168.1.50] to MAC address 98:84:e3:eb:5b:61, Thursday, December 27, 2018 08:57:50
[DHCP IP: 192.168.1.26] to MAC address a8:5c:2c:5c:9d:5f, Thursday, December 27, 2018 08:48:53
[DHCP IP: 192.168.1.8] to MAC address d0:e7:82:bc:dd:e7, Thursday, December 27, 2018 08:43:03
[DHCP IP: 192.168.1.65] to MAC address 84:c0:ef:55:1b:55, Thursday, December 27, 2018 08:42:46
[UPnP set event: add_nat_rule] from source 192.168.1.30, Thursday, December 27, 2018 08:42:33
[DHCP IP: 192.168.1.36] to MAC address 18:74:2e:39:44:ee, Thursday, December 27, 2018 07:40:23
[DHCP IP: 192.168.1.20] to MAC address 5c:ad:76:24:5a:79, Thursday, December 27, 2018 07:25:14
[DHCP IP: 192.168.1.42] to MAC address 00:11:32:55:f3:68, Thursday, December 27, 2018 07:14:07
[DHCP IP: 192.168.1.9] to MAC address a0:cc:2b:10:9b:7a, Thursday, December 27, 2018 06:49:19
[DHCP IP: 192.168.1.13] to MAC address 20:c9:d0:62:a0:f0, Thursday, December 27, 2018 06:43:47
[DHCP IP: 192.168.1.44] to MAC address d4:81:d7:6f:46:e6, Thursday, December 27, 2018 06:36:56
[DHCP IP: 192.168.1.23] to MAC address 08:e6:89:39:d5:1c, Thursday, December 27, 2018 06:31:48
[DHCP IP: 192.168.1.43] to MAC address 34:15:13:bf:3a:db, Thursday, December 27, 2018 06:14:47
[DHCP IP: 192.168.1.20] to MAC address 5c:ad:76:24:5a:79, Thursday, December 27, 2018 06:14:46
[DHCP IP: 192.168.1.4] to MAC address 48:d6:d5:6b:18:f1, Monday, December 10, 2018 13:14:54
[DHCP IP: 192.168.1.49] to MAC address ac:0d:1b:ef:81:7b, Monday, December 10, 2018 13:05:15
[DHCP IP: 192.168.1.28] to MAC address 00:11:d9:68:4e:6e, Monday, December 10, 2018 13:04:53
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 13:01:27
[DHCP IP: 192.168.1.49] to MAC address ac:0d:1b:ef:81:7b, Monday, December 10, 2018 12:55:38
[DHCP IP: 192.168.1.36] to MAC address 18:74:2e:39:44:ee, Monday, December 10, 2018 12:55:26
[DHCP IP: 192.168.1.50] to MAC address 98:84:e3:eb:5b:61, Monday, December 10, 2018 12:41:20
[UPnP set event: del_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:38:46
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:31:11
[DHCP IP: 192.168.1.43] to MAC address 34:15:13:bf:3a:db, Monday, December 10, 2018 12:14:46
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:03:29
[DHCP IP: 192.168.1.61] to MAC address 28:ed:e0:9d:5d:e1, Monday, December 10, 2018 11:52:08
[DHCP IP: 192.168.1.29] to MAC address 8c:45:00:c4:ac:5d, Monday, December 10, 2018 11:49:24
7 Replies
When I logged back in 12/27 was gone and only 12/10 and earlier was there.
Try a reset on the Orbi router and setup from scratch. Enable the logging that you need and check to see if you still notice gaps in the logs.
What FW version are you using? v210?
Am running V2.2.1.210 on router and both satellites.
DigitalMan2112 wrote:
When I logged back in 12/27 was gone and only 12/10 and earlier was there.
And yes, Logs in the current Orbi software has too many bugs. We have been discussing some similar issues of missing logs here: https://community.netgear.com/t5/Orbi/Logging-for-all-products/m-p/1680228
Thanks. Feeling better. Won't assume I've been hacked or anything at this point.
DigitalMan2112 wrote:
........ Also are the add_nat_rule entries normal as I am the only admin and have not been making any changes to the router.
..........
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 13:01:27
[UPnP set event: del_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:38:46
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:31:11
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:03:29Those events are normal if you have UPnP activated and you have devices in the network.
UPnP is a network protocol that allows compliant devices to automatically set port forwarding rules for themselves. These devices can be personal computers, printers, security cameras, game consoles or mobile devices that communicate with each other and share data over your network.
