NightHawk MK63 generating a lot of traffic

[Bingoig11]

Hi there,

I've noticed in the logs of my firewall, that both MR60 and MS60 are generating a huge amount of traffic to netgear.com domain.

This doesn't affect the bandwidth available as this is ICMP traffic but it generates a lot of useless noise in the logs.

I want to avoid not logging this traffic, but I'd like to understand why this traffic?

Thanks,

[Bingoig11]

No one?

[Bingoig11]

No one is able to explain why it needs to send 1 ping per second all the time? Surprising...

[Christian_R]

Hi Bingoig11, 

You may reach out to our support team with the logs for further feedback. 

https://www.netgear.com/support/contact.aspx

Christian 

[Bingoig11]

Hi,
This is what I've done Indeed.

[Mattse]

I think i posted exyctly the same question (https://community.netgear.com/t5/Nighthawk-Mesh-System/MS60-Satellites-generates-a-lot-of-traffic-to...)
@Bingoig11 do you have som news about it?

[Bingoig11]

I received an answer from support who submitted the issue to engineering who confirmed that this is a bug.
It should be resolved in next firmware but no release date communicated.

[Mini4x]

Months later still happenig. Anyone hear anything?

[Bingoig11]

I've reopened a case to get feedback on a new firmware.
Unfortunately, still no ETA...
7.000.000 requests on my side, really noisy and annoying...

[Mattse]

Hello @netgear 

we are still wating for the firmware...

[Bingoig11]

I'm fed up waiting for this firmware...
Thinking about replacing the Nighthawk with another not Netgear mesh system...

[Mini4x]

Same - this is unacceptable, phonein ghome 90,000 times every 24 hours isn't a small bug.

Netgear support also closed my ticket and since my 30 days was up won't allow me to reopen or create a new case.

Last time I buy anythign Netgear.

[Bingoig11]

DNS Queries only for ICMP...

@netgear seriously???

[Mini4x]

Mine is hitting

www.netgear.com

devicelocation.ngxcld.com

time.nst.gov (set me time server to this for testing)

Roughly 85,000 times a day, bith my MR60 and MS60 are doing this, i've tried going back a few veriosn of the firmware and still doing it.

[Christian_R]

Hello Mini4x & Bingoig11, 

May you send me a private message with your email address and case number(s) and I can look into this further. 

Thanks,

Christian 

[Bingoig11]

No news, no update, no new firmware...

Think the mesh will be removed and replaced with another solution.

[schumaku]

@Christian_R appears the DNS resolver code in place does not do any caching, otherwise it would not query the DNS again for the default TTL, which is 86400 secs (1 day) for www.netgear.com [resp. default TTL = 900 (15 mins) for netgear.com SOA]. 

[Mini4x]

Th ebig question is why does it NEED to make 80,000 requests a day? I've blocked mine at this point, and am probably going with a Ubiquity setup instead this is just too much.

[schumaku]

---

@Mini4x wrote:

Th ebig question is why does it NEED to make 80,000 requests a day?

---

What ever the design intention is to do some Internet connection test every or every other second - this is what is _really_ going on there. But this implementation is multiplying the traffic .... DNS query .... ICMP .... both can't be right.

[Mini4x]

It's also hitting NTP every second.

Clearly no need for this.

[schumaku]

---

@Mini4x wrote:

It's also hitting NTP every second.

---

Just again this **** DNS or real NTP trafic?

[Mini4x]

Not sure, it's in ym PiHole logs hitting 3-4 hosts 85.000 times a day.

Tell me any valid reason this should do this?

[Mattse]

Still no new firmware - Why?!?

[schumaku]

---

@Mattse wrote:
Still no new firmware - Why?!?

---

Wating for something pushed for a live update? -> MR60 / MS60 Firmware Version 1.0.6.112 - Hot Fix available for a few days already.

[Bingoig11]

Just deployed the fix on router and satellites.
Seems that constant requests are stopped but will monitor it tomorrow.