NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

j0ebeer's avatar
j0ebeer
Guide
Jan 14, 2020

Orbi excessive pinging

Does anyone else see their Orbi satellites doing excessing pings to the default gateway?  In my firewall log I am getting thousand of them and I don't know why.  Or where to disable it.   Joe
dl42's avatar
dl42
Aspirant
Jan 15, 2020

I'm running  RBK13 in AP mode and I see the same high volume of pings on the gateway.   Orbi is not acting as dhcp server in my environment.

I also see a large number of pings to external IP addresses.   I have support cases open on these but have not had any responses.

  • CrimpOn's avatar
    CrimpOn
    Guru - Experienced User
    Jan 15, 2020
    dl42 wrote:

    I'm running  RBK13 in AP mode and I see the same high volume of pings on the gateway.   Orbi is not acting as dhcp server in my environment.

    I also see a large number of pings to external IP addresses.   I have support cases open on these but have not had any responses.

    Since the Orbi is in AP mode, I believe it is entirely "normal" for the router and satellites to ping the gateway.  To us, once a second may seem excessive, but I have no idea what internet "standards" are for that kind of "keep alive" behavior.

     

    Pings to external addresses are a different matter.  Are those from the Orbi equipment?

    • j0ebeer's avatar
      j0ebeer
      Guide
      Jan 15, 2020

      I don't consider this "normal" for any manufacuter.  For me it is only the 2 Orbi satellites I have and they are only pinging the default gateway given by the dhcp server of my firewall.  I only started capturing the logs into Splunk yesterday but for 20 hours I show over 40,000 pings (screenshot attached) from the 2 sats.  Is it impacting my home network performance, probably not.  But does it need to be this excessive?  I am a security sales engineer and when I do demos I now have to filter out this excessive garbage so it doesn't skew graphs and reports.  Bit annoying.

       

      Hopefully someone from Netgear sees this and can comment.  Otherwise I'll be looking to toss the system onto ebay. 

      • dl42's avatar
        dl42
        Aspirant
        Jan 15, 2020

        you might want to take a look at the outbound traffic too.

         

        this lot are from the router RBR10 running in AP mode.

        2020-01-10 13:20:18 Allow 8.8.4.4 ICMP
        2020-01-10 13:20:18 Allow 8.8.8.8 ICMP
        2020-01-10 13:20:19 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:20 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:20 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:20 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:20 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:20 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:20 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:21 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:21 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:21 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:22 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:22 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:22 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:22 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:22 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:22 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:22 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:22 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:22 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:22 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:23 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:23 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:23 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:23 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:23 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:23 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:24 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:24 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:24 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:25 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:25 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:25 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:26 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:26 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:45 Allow 52.30.38.228 https/tcp
        2020-01-10 13:20:45 Allow 52.30.38.228 HTTP
        2020-01-10 13:20:46 Allow 52.30.38.228 HTTP
        2020-01-10 13:20:46 Allow 52.211.208.165 https/tcp

        this lot from the satellite RBS10;

        2020-01-10 13:20:18 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:18 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:19 Allow 8.8.4.4 ICMP
        2020-01-10 13:20:19 Allow 8.8.8.8 ICMP
        2020-01-10 13:20:19 Allow 192.168.42.254 icmp
        2020-01-10 13:20:19 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:19 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:20 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:20 Allow 8.8.4.4 ICMP
        2020-01-10 13:20:20 Allow 8.8.8.8 ICMP
        2020-01-10 13:20:20 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:20 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:20 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:21 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:21 Allow 8.8.4.4 ICMP
        2020-01-10 13:20:21 Allow 8.8.8.8 ICMP
        2020-01-10 13:20:21 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:21 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:21 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:22 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:22 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:22 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:22 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:22 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:22 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:22 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:22 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:22 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:22 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:23 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:23 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:23 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:23 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:24 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:24 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:24 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:25 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:25 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:25 Allow 143.204.192.117 ICMP
        2020-01-10 13:20:25 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:26 Allow 13.227.171.99 ICMP
        2020-01-10 13:20:26 Allow 13.227.171.99 ICMP