NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
HTB: quantum of class 11024 is big. Losing internet
I have several loose internet connection intermittenly. The log shows this, HTB: quantum of class 11024 is big consider r2q change. Also could show 11024 instead of 10001 or both. I'm looking for a s...
Hi! Thank's for solution.
I'm doing a follow up to see any more error so far, still watching this log :
Tue Apr 17 11:29:31 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] xt_TCPMSS: bad length (209 bytes)
Tue Apr 17 11:25:06 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] xt_TCPMSS: bad length (209 bytes)
Tue Apr 17 08:34:25 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] xt_TCPMSS: bad length (552 bytes)
Mon Apr 16 18:24:19 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] xt_TCPMSS: bad length (324 bytes)As I have mentioned from my previous response, there might be possible that there is a DDOS attack. It is similar to the concern posted on the forum thread here. The logs states that the firewall received an improperly formatted TCP packet. It might be a hacker probing the firewall to see if it can breach the firewall's security. The firewall handles this correctly in which it discards the packet without any harm.
Regards,
DaneA
NETGEAR Community Team
Hi BigMoneyTK,
Welcome to the community! :)
Let us isolate the problem. Kindly answer the questions below:
a. Disconnect the FVS336Gv3 from the modem. Then, connect a PC directly to the modem and observe if the internet connection is stable. Is the internet connection fine when connected directly to the modem?
b. The modem where the FVS336Gv3 is connected to, is it a modem-only device or a combination of modem-router?
c. Are you using the DNS provided by your ISP? If yes, kindly try using Google DNS such as 8.8.8.8 or 8.8.4.4 then observe the internet connection as well as if the same logs will show up.
d. Since you mentioned, "When I connect two Wan connections, it drops," are you subscribed to 2 different ISPs?
e. Are there firewall rules configured on the FVS336Gv3? If yes, kindly try to disable (or delete) it then observe the internet connection through the FVS336Gv3 as well as if the same logs will appear.
f. Are there requests from an unknown Public IP address? To check this, on the web-GUI of the FVS336Gv3, go to Monitoring > Firewall Logs & E-mail. Then, under the Accepted Packets section, check the boxes on both LAN-to-WAN and WAN-to-LAN.
Regards,
DaneA
NETGEAR Community Team
I just want to follow-up on this. We’d greatly appreciate your feedback.
Regards,
DaneA
NETGEAR Community Team
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
