- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Gap in logs?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Gap in logs?
I was notified by my ISP that they believe there was a copyright infringement on my IP address on 12/25/2018. When I look at the logs I see a huge gap. I see today 12/27 and then it goes to 12/10. Is this normal or should I be concerened? Also are the add_nat_rule entries normal as I am the only admin and have not been making any changes to the router.
[admin login] from source 192.168.1.19, Thursday, December 27, 2018 08:59:12
[DHCP IP: 192.168.1.50] to MAC address 98:84:e3:eb:5b:61, Thursday, December 27, 2018 08:57:50
[DHCP IP: 192.168.1.26] to MAC address a8:5c:2c:5c:9d:5f, Thursday, December 27, 2018 08:48:53
[DHCP IP: 192.168.1.8] to MAC address d0:e7:82:bc:dd:e7, Thursday, December 27, 2018 08:43:03
[DHCP IP: 192.168.1.65] to MAC address 84:c0:ef:55:1b:55, Thursday, December 27, 2018 08:42:46
[UPnP set event: add_nat_rule] from source 192.168.1.30, Thursday, December 27, 2018 08:42:33
[DHCP IP: 192.168.1.36] to MAC address 18:74:2e:39:44:ee, Thursday, December 27, 2018 07:40:23
[DHCP IP: 192.168.1.20] to MAC address 5c:ad:76:24:5a:79, Thursday, December 27, 2018 07:25:14
[DHCP IP: 192.168.1.42] to MAC address 00:11:32:55:f3:68, Thursday, December 27, 2018 07:14:07
[DHCP IP: 192.168.1.9] to MAC address a0:cc:2b:10:9b:7a, Thursday, December 27, 2018 06:49:19
[DHCP IP: 192.168.1.13] to MAC address 20:c9:d0:62:a0:f0, Thursday, December 27, 2018 06:43:47
[DHCP IP: 192.168.1.44] to MAC address d4:81:d7:6f:46:e6, Thursday, December 27, 2018 06:36:56
[DHCP IP: 192.168.1.23] to MAC address 08:e6:89:39:d5:1c, Thursday, December 27, 2018 06:31:48
[DHCP IP: 192.168.1.43] to MAC address 34:15:13:bf:3a:db, Thursday, December 27, 2018 06:14:47
[DHCP IP: 192.168.1.20] to MAC address 5c:ad:76:24:5a:79, Thursday, December 27, 2018 06:14:46
[DHCP IP: 192.168.1.4] to MAC address 48:d6:d5:6b:18:f1, Monday, December 10, 2018 13:14:54
[DHCP IP: 192.168.1.49] to MAC address ac:0d:1b:ef:81:7b, Monday, December 10, 2018 13:05:15
[DHCP IP: 192.168.1.28] to MAC address 00:11:d9:68:4e:6e, Monday, December 10, 2018 13:04:53
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 13:01:27
[DHCP IP: 192.168.1.49] to MAC address ac:0d:1b:ef:81:7b, Monday, December 10, 2018 12:55:38
[DHCP IP: 192.168.1.36] to MAC address 18:74:2e:39:44:ee, Monday, December 10, 2018 12:55:26
[DHCP IP: 192.168.1.50] to MAC address 98:84:e3:eb:5b:61, Monday, December 10, 2018 12:41:20
[UPnP set event: del_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:38:46
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:31:11
[DHCP IP: 192.168.1.43] to MAC address 34:15:13:bf:3a:db, Monday, December 10, 2018 12:14:46
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:03:29
[DHCP IP: 192.168.1.61] to MAC address 28:ed:e0:9d:5d:e1, Monday, December 10, 2018 11:52:08
[DHCP IP: 192.168.1.29] to MAC address 8c:45:00:c4:ac:5d, Monday, December 10, 2018 11:49:24
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Gap in logs?
When I logged back in 12/27 was gone and only 12/10 and earlier was there.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Gap in logs?
Try a reset on the Orbi router and setup from scratch. Enable the logging that you need and check to see if you still notice gaps in the logs.
What FW version are you using? v210?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Gap in logs?
Am running V2.2.1.210 on router and both satellites.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Gap in logs?
Shouldn't be any gaps however this FW has caused some odd issues. Let us know if you still see this after a ERASE on the router and setup from scratch.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Gap in logs?
@DigitalMan2112 wrote:
........ Also are the add_nat_rule entries normal as I am the only admin and have not been making any changes to the router.
..........
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 13:01:27
[UPnP set event: del_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:38:46
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:31:11
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:03:29
Those events are normal if you have UPnP activated and you have devices in the network.
UPnP is a network protocol that allows compliant devices to automatically set port forwarding rules for themselves. These devices can be personal computers, printers, security cameras, game consoles or mobile devices that communicate with each other and share data over your network.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Gap in logs?
@DigitalMan2112 wrote:
When I logged back in 12/27 was gone and only 12/10 and earlier was there.
And yes, Logs in the current Orbi software has too many bugs. We have been discussing some similar issues of missing logs here: https://community.netgear.com/t5/Orbi/Logging-for-all-products/m-p/1680228
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Gap in logs?
Thanks. Feeling better. Won't assume I've been hacked or anything at this point.
• What is the difference between WiFi 6 and WiFi 7?
• Yes! WiFi 7 is backwards compatible with other Wifi devices? Learn more