Odd behavior - RBS960 Satelllites flooding DHCP requests

[donawalt]

Seen thus before.....148 is an RBSE960 satellite with hardwired backhaul. It sent 22 DHCP requests in about 11 minutes:

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:44:42

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:44:43

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:44:54

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:44:57

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:44:58

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:45:03

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:45:05

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:45:09

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:45:15

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:47:11

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:47:13

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:47:15

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:47:27

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:47:34

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:47:44

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:53:08

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:53:19

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:53:29

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:53:40

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:55:36

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:55:49

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 12:55:59

And then, less than an hour later, it did 10 more in about 3 minutes:

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 13:40:51

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 13:40:52

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 13:40:59

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 13:41:04

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 13:41:10

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 13:41:22

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 13:43:12

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 13:43:26

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 13:43:30

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Friday, Apr 26,2024 13:43:44

The day before it did 19 in 9 minutes:

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:33:51

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:34:01

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:34:11

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:34:15

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:35:39

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:35:51

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:36:01

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:37:30

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:38:17

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:38:49

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:39:02

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:39:18

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:40:25

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:40:39

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:40:42

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:40:52

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:42:08

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:42:18

[DHCP IP: (192.168.1.148)] to MAC address XX:XX:XX:XX:XX:XX, Thursday, Apr 25,2024 19:42:30

Not to be outdone, the other RBS did 13 in 3 minutes:

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:44:56

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:44:57

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:45:00

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:45:05

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:45:08

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:45:12

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:45:17

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:47:07

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:47:12

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:47:15

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:47:22

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:47:30

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 12:47:40

It did 8 in 5 minutes:

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 13:40:40

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 13:40:51

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 13:40:56

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 13:41:02

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 13:41:08

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 13:43:58

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 13:44:12

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Friday, Apr 26,2024 13:44:22

It did 33 in 34 minutes:

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:22:42

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:22:55

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:23:05

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:23:16

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:24:35

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:24:46

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:24:56

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:26:24

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:27:11

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:27:43

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:27:57

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:28:12

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:34:33

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:34:45

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:34:55

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:35:05

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:36:24

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:36:34

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:36:45

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:38:13

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:39:01

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:39:32

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:39:45

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:39:52

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:40:02

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:49:42

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:53:41

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:53:56

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:54:06

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:54:17

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:55:56

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:56:09

[DHCP IP: (192.168.1.149)] to MAC address YY:YY:YY:YY:YY:YY, Thursday, Apr 25,2024 19:56:19

Outside of these areas, they both had 1-2 DHCP requests all week. Very odd behavior.

[donawalt]

Actually, some important notes - Thursday I did a factory reset of everything, so all this may have been the result of coming online. Wed night/Thursday was when I suffered from very low WiFi speeds reported in this thread. So maybe we just chalk this up to a network that was in a shambles lol.

[FURRYe38]

One item I keep an eye on is any switch you have connected in between the RBR and RBS, look at the switches front LED activity lights. Usually these are randomly blinking on and off. If there always blinking ON and fast, means there is an ARP storm happening. Usually with Orbi RBS being connected, this should only last for under 30 seconds. I've seen them only last for a few seconds. This is the RBS and RBR doing the DHCPg here. If they go beyond 30 seconds and more than a minute, means there is something wrong. Bad cable, looped cable, or something is stuck and not completing the process normally. Need to start unplugging devices one by one to see where it maybe coming from.