NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
HTB: quantum of class 11024 is big. Losing internet
I have several loose internet connection intermittenly. The log shows this, HTB: quantum of class 11024 is big consider r2q change. Also could show 11024 instead of 10001 or both. I'm looking for a s...
Hi! Thank's for solution.
I'm doing a follow up to see any more error so far, still watching this log :
Tue Apr 17 11:29:31 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] xt_TCPMSS: bad length (209 bytes)
Tue Apr 17 11:25:06 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] xt_TCPMSS: bad length (209 bytes)
Tue Apr 17 08:34:25 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] xt_TCPMSS: bad length (552 bytes)
Mon Apr 16 18:24:19 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] xt_TCPMSS: bad length (324 bytes)As I have mentioned from my previous response, there might be possible that there is a DDOS attack. It is similar to the concern posted on the forum thread here. The logs states that the firewall received an improperly formatted TCP packet. It might be a hacker probing the firewall to see if it can breach the firewall's security. The firewall handles this correctly in which it discards the packet without any harm.
Regards,
DaneA
NETGEAR Community Team
I apologize for the late response.
Thu Apr 5 11:19:40 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] xt_TCPMSS: bad length (209 bytes)
Thu Apr 5 11:09:40 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] xt_TCPMSS: bad length (209 bytes)
It might be possible that there is a DDOS attack. It is similar to the concern posted on the forum thread here.
Thu Apr 5 11:06:55 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] HTB: quantum of class 10001 is big. Consider r2q change.
Thu Apr 5 11:06:55 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] p->perfect 0000000000000000 p->h a800000004a02e00
Thu Apr 5 11:06:55 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] tcindex_dump(tp a8000000025f9780,fh 0x0,skb a800000005451380,t a800000003ac7010),p a800000006f74a00,r 0000000000000000,b a800000003ac7038
Thu Apr 5 11:06:55 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] tcindex_change(tp a8000000025f9780,handle 0x00000000,tca a800000007c05a80,arg a8000000028f3950),opt a800000005311a30,p a800000006f74a00,r 0000000000000000,*arg 0x0
Thu Apr 5 11:06:55 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] tcindex_get(tp a8000000025f9780,handle 0x00000000)
Thu Apr 5 11:06:55 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] tcindex_init(tp a8000000025f9780)
Thu Apr 5 11:06:55 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] tcindex_delete(tp a800000003a83f80,arg 0xa800000006f74a08),p a8000000025f9780,f 0000000000000000
Thu Apr 5 11:06:55 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] tcindex_walk(tp a800000003a83f80,walker a80000000251f900),p a8000000025f9780
Thu Apr 5 11:06:55 2018((GMT-0300)) [FVS336GV3][Kernel][KERNEL] tcindex_destroy(tp a800000003a83f80),p a8000000025f9780
These logs are similar to the logs that was posted on the old forum post here. The forum user 'WANAO' posted the solution he did wherein he changed the NTP settings and that solved the issue.
Regards,
DaneA
NETGEAR Community Team
I just want to follow-up on this. We’d greatly appreciate hearing your feedback
Otherwise, if ever your concern has been addressed or resolved, I encourage you to mark the appropriate reply as the “Accepted Solution” so others can be confident in benefiting from the solution. The NETGEAR Community looks forward to hearing from you and being a helpful resource in the future!
Regards,
DaneA
NETGEAR Community Team
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
