×

Introducing the Orbi 970 Series Mesh System with WiFi 7(BE) technology. For more information visit the NETGEAR Press Room.

Orbi WiFi 7 RBE973
Reply

Gap in logs?

Gap in logs?

I was notified by my ISP that they believe there was a copyright infringement on my IP address on 12/25/2018. When I look at the logs I see a huge gap. I see today 12/27 and then it goes to 12/10.  Is this normal or should I be concerened? Also are the add_nat_rule entries normal as I am the only admin and have not been making any changes to the router.

 

[admin login] from source 192.168.1.19, Thursday, December 27, 2018 08:59:12
[DHCP IP: 192.168.1.50] to MAC address 98:84:e3:eb:5b:61, Thursday, December 27, 2018 08:57:50
[DHCP IP: 192.168.1.26] to MAC address a8:5c:2c:5c:9d:5f, Thursday, December 27, 2018 08:48:53
[DHCP IP: 192.168.1.8] to MAC address d0:e7:82:bc:dd:e7, Thursday, December 27, 2018 08:43:03
[DHCP IP: 192.168.1.65] to MAC address 84:c0:ef:55:1b:55, Thursday, December 27, 2018 08:42:46
[UPnP set event: add_nat_rule] from source 192.168.1.30, Thursday, December 27, 2018 08:42:33
[DHCP IP: 192.168.1.36] to MAC address 18:74:2e:39:44:ee, Thursday, December 27, 2018 07:40:23
[DHCP IP: 192.168.1.20] to MAC address 5c:ad:76:24:5a:79, Thursday, December 27, 2018 07:25:14
[DHCP IP: 192.168.1.42] to MAC address 00:11:32:55:f3:68, Thursday, December 27, 2018 07:14:07
[DHCP IP: 192.168.1.9] to MAC address a0:cc:2b:10:9b:7a, Thursday, December 27, 2018 06:49:19
[DHCP IP: 192.168.1.13] to MAC address 20:c9:d0:62:a0:f0, Thursday, December 27, 2018 06:43:47
[DHCP IP: 192.168.1.44] to MAC address d4:81:d7:6f:46:e6, Thursday, December 27, 2018 06:36:56
[DHCP IP: 192.168.1.23] to MAC address 08:e6:89:39:d5:1c, Thursday, December 27, 2018 06:31:48
[DHCP IP: 192.168.1.43] to MAC address 34:15:13:bf:3a:db, Thursday, December 27, 2018 06:14:47
[DHCP IP: 192.168.1.20] to MAC address 5c:ad:76:24:5a:79, Thursday, December 27, 2018 06:14:46
[DHCP IP: 192.168.1.4] to MAC address 48:d6:d5:6b:18:f1, Monday, December 10, 2018 13:14:54
[DHCP IP: 192.168.1.49] to MAC address ac:0d:1b:ef:81:7b, Monday, December 10, 2018 13:05:15
[DHCP IP: 192.168.1.28] to MAC address 00:11:d9:68:4e:6e, Monday, December 10, 2018 13:04:53
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 13:01:27
[DHCP IP: 192.168.1.49] to MAC address ac:0d:1b:ef:81:7b, Monday, December 10, 2018 12:55:38
[DHCP IP: 192.168.1.36] to MAC address 18:74:2e:39:44:ee, Monday, December 10, 2018 12:55:26
[DHCP IP: 192.168.1.50] to MAC address 98:84:e3:eb:5b:61, Monday, December 10, 2018 12:41:20
[UPnP set event: del_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:38:46
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:31:11
[DHCP IP: 192.168.1.43] to MAC address 34:15:13:bf:3a:db, Monday, December 10, 2018 12:14:46
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:03:29
[DHCP IP: 192.168.1.61] to MAC address 28:ed:e0:9d:5d:e1, Monday, December 10, 2018 11:52:08
[DHCP IP: 192.168.1.29] to MAC address 8c:45:00:c4:ac:5d, Monday, December 10, 2018 11:49:24

Model: RBK50| Orbi AC3000 High-Performance Tri-Band WiFi System
Message 1 of 8

Re: Gap in logs?

When I logged back in 12/27 was gone and only 12/10 and earlier was there.

Message 2 of 8
FURRYe38
Guru

Re: Gap in logs?

Try a reset on the Orbi router and setup from scratch. Enable the logging that you need and check to see if you still notice gaps in the logs.

What FW version are you using? v210? 

Message 3 of 8

Re: Gap in logs?

Am running V2.2.1.210 on router and both satellites.

Message 4 of 8
FURRYe38
Guru

Re: Gap in logs?

Shouldn't be any gaps however this FW has caused some odd issues. Let us know if you still see this after a ERASE on the router and setup from scratch. 

Message 5 of 8
ekhalil
Master

Re: Gap in logs?


@DigitalMan2112 wrote:

........ Also are the add_nat_rule entries normal as I am the only admin and have not been making any changes to the router.

 

..........
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 13:01:27
[UPnP set event: del_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:38:46
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:31:11
[UPnP set event: add_nat_rule] from source 192.168.1.22, Monday, December 10, 2018 12:03:29


Those events are normal if you have UPnP activated and you have devices in the network.

UPnP is a network protocol that allows compliant devices to automatically set port forwarding rules for themselves. These devices can be personal computers, printers, security cameras, game consoles or mobile devices that communicate with each other and share data over your network.

Message 6 of 8
ekhalil
Master

Re: Gap in logs?


@DigitalMan2112 wrote:

When I logged back in 12/27 was gone and only 12/10 and earlier was there.


And yes, Logs in the current Orbi software has too many bugs. We have been discussing some similar issues of missing logs here: https://community.netgear.com/t5/Orbi/Logging-for-all-products/m-p/1680228

Message 7 of 8

Re: Gap in logs?

Thanks. Feeling better. Won't assume I've been hacked or anything at this point.

Message 8 of 8
Top Contributors
Discussion stats
  • 7 replies
  • 1468 views
  • 2 kudos
  • 3 in conversation
Announcements

Orbi WiFi 7