[DoS Attack: ARP Attack]

Talk about setting up your home network.
Post Reply
User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

[DoS Attack: ARP Attack]

#1

Post by Crash2009 » Sun Feb 08, 2015 5:13 am

I have been on the road quite a bit for the last couple months, and recently took some time off to close 2014, get the taxes ready for the preparer, and watch a little TV. While watching live I noticed a few PQ issues such as surging, a tiny bit of combing, and a bit of pixilation. My workstations were also effected by being slow (spinning doughnut between web pages)Internet provider changed my IP, Usually this means it's time to do a little Network Investigation. I guess the kids decided to install some routers turned into access points, and one of them left the guest wifi door open with no security. I found this in one of the access points log section. Have since closed the doors and hidden the SSID's. My question is can you point the finger at anything in the following log?

The ARP attacks came from:

192.168.1.97 which is an Asus router running in AP mode.
192.168.1.34 is an Android Phone that connects wirelessly to 192.168.1.97
192.168.1.149 is an Android Phone that connects to a Belkin running in AP mode.

I added up some of the more frequent failed attempts:

fc:c2:de:21:2c:27 is a phone 192.168.1.219 that connects to Netgear 192.168.1.80 AP mode (14 attempts)
cc:95:d7:39:76:a0 is a TV 192.168.1.187 that connects wirelessly to Netgear 192.168.1.80 AP mode (14 attempts)
We were attempted from about 35 different macs, most of them are not associated with this network.


The main router 192.168.1.1 was uneffected except for keeping up with the excess data on the network. Prior to my intervention the traffic monitor was surging up to 10,000 kbps. A normal night is 1,000 kbps.

The following is from one of the log files on the AP that had the wide open Guest WiFi

Code: Select all

[admin login] from source 192.168.1.123, Friday, February 06, 2015 04:05:24
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Friday, February 06, 2015 01:06:30
[Internet connected] IP address: 192.168.1.80, Thursday, February 05, 2015 17:28:04
[admin login] from source 192.168.1.123, Thursday, February 05, 2015 15:08:55
[admin login failure] from source 192.168.1.123, Thursday, February 05, 2015 15:08:39
[Time synchronized with NTP server] Thursday, February 05, 2015 07:15:37
[admin login] from source 192.168.1.123, Thursday, February 05, 2015 05:55:48
[Internet connected] IP address: 192.168.1.80, Thursday, February 05, 2015 05:28:03
[WLAN access rejected: incorrect security] from MAC address f8:f1:b6:2a:16:a8, Thursday, February 05, 2015 04:13:18
[Internet connected] IP address: 192.168.1.80, Wednesday, February 04, 2015 17:28:04
[WLAN access rejected: incorrect security] from MAC address 14:10:9f:b2:11:da, Wednesday, February 04, 2015 17:17:26
[WLAN access rejected: incorrect security] from MAC address b4:18:d1:61:34:28, Wednesday, February 04, 2015 14:53:09
[DoS Attack: ARP Attack] from source: 192.168.1.97, Wednesday, February 04, 2015 14:01:07
[Time synchronized with NTP server] Wednesday, February 04, 2015 07:15:36
[WLAN access rejected: incorrect security] from MAC address e8:99:c4:7d:10:74, Wednesday, February 04, 2015 06:57:38
[Internet connected] IP address: 192.168.1.80, Wednesday, February 04, 2015 05:28:03
[WLAN access rejected: incorrect security] from MAC address c8:bc:c8:39:4a:22, Wednesday, February 04, 2015 05:15:17
[Internet connected] IP address: 192.168.1.80, Tuesday, February 03, 2015 17:28:04
[Time synchronized with NTP server] Tuesday, February 03, 2015 07:15:35
[Internet connected] IP address: 192.168.1.80, Monday, February 02, 2015 17:28:04
[Time synchronized with NTP server] Monday, February 02, 2015 07:15:34
[WLAN access rejected: incorrect security] from MAC address e8:99:c4:7d:10:74, Monday, February 02, 2015 05:44:30
[Internet connected] IP address: 192.168.1.80, Sunday, February 01, 2015 17:28:03
[WLAN access rejected: incorrect security] from MAC address f0:db:e2:8e:06:9f, Sunday, February 01, 2015 13:04:10
[WLAN access rejected: incorrect security] from MAC address 10:a5:d0:52:38:e7, Sunday, February 01, 2015 10:14:18
[WLAN access rejected: incorrect security] from MAC address dc:86:d8:8b:46:db, Sunday, February 01, 2015 07:04:40
[DoS Attack: ARP Attack] from source: 192.168.1.97, Sunday, February 01, 2015 05:48:06
[Internet connected] IP address: 192.168.1.80, Sunday, February 01, 2015 05:28:02
[Time synchronized with NTP server] Sunday, February 01, 2015 03:07:13
[WLAN access rejected: incorrect security] from MAC address 78:fd:94:25:80:9f, Saturday, January 31, 2015 18:40:35
[Internet connected] IP address: 192.168.1.80, Saturday, January 31, 2015 17:28:02
[WLAN access rejected: incorrect security] from MAC address 8c:fa:ba:8f:b6:a2, Saturday, January 31, 2015 08:50:52
[Internet connected] IP address: 192.168.1.80, Saturday, January 31, 2015 05:28:01
[DoS Attack: ARP Attack] from source: 192.168.1.97, Saturday, January 31, 2015 05:23:54
[Time synchronized with NTP server] Saturday, January 31, 2015 03:07:12
[WLAN access rejected: incorrect security] from MAC address 14:10:9f:b2:11:da, Friday, January 30, 2015 22:26:21
[WLAN access rejected: incorrect security] from MAC address 14:10:9f:b0:91:bf, Friday, January 30, 2015 22:22:26
[WLAN access rejected: incorrect security] from MAC address 14:10:9f:b2:11:da, Friday, January 30, 2015 19:52:24
[Internet connected] IP address: 192.168.1.80, Friday, January 30, 2015 17:28:01
[WLAN access rejected: incorrect security] from MAC address 1c:99:4c:74:b6:3d, Friday, January 30, 2015 09:22:39
[Internet connected] IP address: 192.168.1.80, Friday, January 30, 2015 05:28:01
[Time synchronized with NTP server] Friday, January 30, 2015 03:07:10
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Thursday, January 29, 2015 18:42:45
[Internet connected] IP address: 192.168.1.80, Thursday, January 29, 2015 17:28:01
[WLAN access rejected: incorrect security] from MAC address 24:a2:e1:bc:a0:39, Thursday, January 29, 2015 12:14:56
[Internet connected] IP address: 192.168.1.80, Thursday, January 29, 2015 05:28:01
[Time synchronized with NTP server] Thursday, January 29, 2015 03:07:09
[DoS Attack: ARP Attack] from source: 192.168.1.35, Wednesday, January 28, 2015 20:33:15
[Internet connected] IP address: 192.168.1.80, Wednesday, January 28, 2015 17:28:01
[WLAN access rejected: incorrect security] from MAC address 14:10:9f:b2:11:da, Wednesday, January 28, 2015 15:36:52
[DoS Attack: ARP Attack] from source: 192.168.1.97, Wednesday, January 28, 2015 14:37:55
[Internet connected] IP address: 192.168.1.80, Wednesday, January 28, 2015 05:28:01
[Time synchronized with NTP server] Wednesday, January 28, 2015 03:07:08
[Internet connected] IP address: 192.168.1.80, Tuesday, January 27, 2015 17:28:01
[WLAN access rejected: incorrect security] from MAC address f8:f1:b6:2a:16:a8, Tuesday, January 27, 2015 14:41:16
[WLAN access rejected: incorrect security] from MAC address 90:68:c3:4c:a3:a0, Tuesday, January 27, 2015 09:57:50
[Internet connected] IP address: 192.168.1.80, Tuesday, January 27, 2015 05:28:01
[Time synchronized with NTP server] Tuesday, January 27, 2015 03:07:07
[Internet connected] IP address: 192.168.1.80, Monday, January 26, 2015 17:28:01
[WLAN access rejected: incorrect security] from MAC address 8c:3a:e3:15:c2:79, Monday, January 26, 2015 07:21:33
[WLAN access rejected: incorrect security] from MAC address 94:63:d1:be:b2:55, Monday, January 26, 2015 06:06:30
[Internet connected] IP address: 192.168.1.80, Monday, January 26, 2015 05:28:01
[Time synchronized with NTP server] Monday, January 26, 2015 03:07:06
[WLAN access rejected: incorrect security] from MAC address e0:b5:2d:07:cf:dc, Sunday, January 25, 2015 20:24:04
[WLAN access rejected: incorrect security] from MAC address 94:63:d1:be:b2:55, Sunday, January 25, 2015 17:56:09
[Internet connected] IP address: 192.168.1.80, Sunday, January 25, 2015 17:28:01
[WLAN access rejected: incorrect security] from MAC address 14:10:9f:b2:11:da, Sunday, January 25, 2015 16:34:55
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Sunday, January 25, 2015 05:31:22
[Internet connected] IP address: 192.168.1.80, Sunday, January 25, 2015 05:28:02
[Time synchronized with NTP server] Sunday, January 25, 2015 03:07:04
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Saturday, January 24, 2015 17:52:03
[Internet connected] IP address: 192.168.1.80, Saturday, January 24, 2015 17:28:01
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Saturday, January 24, 2015 15:52:20
[WLAN access rejected: incorrect security] from MAC address 10:a5:d0:d8:b7:22, Saturday, January 24, 2015 12:10:03
[Internet connected] IP address: 192.168.1.80, Saturday, January 24, 2015 05:28:02
[Time synchronized with NTP server] Saturday, January 24, 2015 03:07:03
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Friday, January 23, 2015 20:43:33
[WLAN access rejected: incorrect security] from MAC address 14:10:9f:b2:11:da, Friday, January 23, 2015 18:45:30
[Internet connected] IP address: 192.168.1.80, Friday, January 23, 2015 17:28:01
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Friday, January 23, 2015 15:07:25
[WLAN access rejected: incorrect security] from MAC address 94:63:d1:be:b2:55, Friday, January 23, 2015 14:01:30
[DoS Attack: ARP Attack] from source: 192.168.1.34, Friday, January 23, 2015 09:10:06
[WLAN access rejected: incorrect security] from MAC address 00:73:e0:73:59:bc, Friday, January 23, 2015 07:55:13
[Internet connected] IP address: 192.168.1.80, Friday, January 23, 2015 05:28:02
[WLAN access rejected: incorrect security] from MAC address 14:10:9f:b2:11:da, Friday, January 23, 2015 05:06:59
[Time synchronized with NTP server] Friday, January 23, 2015 03:07:02
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Thursday, January 22, 2015 23:11:10
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:26:7c:23, Thursday, January 22, 2015 21:13:27
[Internet connected] IP address: 192.168.1.80, Thursday, January 22, 2015 17:28:01
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Thursday, January 22, 2015 16:16:29
[Internet connected] IP address: 192.168.1.80, Thursday, January 22, 2015 05:28:02
[Time synchronized with NTP server] Thursday, January 22, 2015 03:07:01
[Internet connected] IP address: 192.168.1.80, Wednesday, January 21, 2015 17:28:01
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Wednesday, January 21, 2015 16:45:53
[WLAN access rejected: incorrect security] from MAC address 4c:80:93:8c:69:87, Wednesday, January 21, 2015 15:54:24
[WLAN access rejected: incorrect security] from MAC address 20:6e:9c:82:2f:f7, Wednesday, January 21, 2015 15:02:16
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Wednesday, January 21, 2015 15:01:23
[WLAN access rejected: incorrect security] from MAC address 20:6e:9c:82:2f:f7, Wednesday, January 21, 2015 14:53:34
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Wednesday, January 21, 2015 14:52:14
[WLAN access rejected: incorrect security] from MAC address 20:6e:9c:82:2f:f7, Wednesday, January 21, 2015 14:48:31
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Wednesday, January 21, 2015 13:45:55
[DoS Attack: ARP Attack] from source: 192.168.1.34, Wednesday, January 21, 2015 07:53:28
[Internet connected] IP address: 192.168.1.80, Tuesday, January 20, 2015 17:28:06
[Internet disconnected] Tuesday, January 20, 2015 17:26:02
[WLAN access rejected: incorrect security] from MAC address e0:b5:2d:07:cf:dc, Tuesday, January 20, 2015 16:55:02
[Internet connected] IP address: 192.168.1.80, Tuesday, January 20, 2015 09:24:25
[Time synchronized with NTP server] Tuesday, January 20, 2015 01:27:50
[Internet connected] IP address: 192.168.1.80, Monday, January 19, 2015 21:24:24
[DoS Attack: ARP Attack] from source: 192.168.1.34, Monday, January 19, 2015 18:20:54
[WLAN access rejected: incorrect security] from MAC address 18:af:61:06:49:86, Monday, January 19, 2015 16:37:49
[WLAN access rejected: incorrect security] from MAC address 40:78:6a:c4:37:16, Monday, January 19, 2015 12:01:25
[Internet connected] IP address: 192.168.1.80, Monday, January 19, 2015 09:24:24
[WLAN access rejected: incorrect security] from MAC address 14:30:c6:b8:e1:aa, Monday, January 19, 2015 08:51:24
[DoS Attack: ARP Attack] from source: 192.168.1.34, Monday, January 19, 2015 08:19:24
[Time synchronized with NTP server] Monday, January 19, 2015 01:27:49
[Internet connected] IP address: 192.168.1.80, Sunday, January 18, 2015 21:24:23
[WLAN access rejected: incorrect security] from MAC address f8:f1:b6:2a:16:a8, Sunday, January 18, 2015 10:36:28
[Internet connected] IP address: 192.168.1.80, Sunday, January 18, 2015 09:24:23
[Time synchronized with NTP server] Sunday, January 18, 2015 01:27:48
[WLAN access rejected: incorrect security] from MAC address 8c:3a:e3:15:c2:79, Saturday, January 17, 2015 22:14:32
[Internet connected] IP address: 192.168.1.80, Saturday, January 17, 2015 21:24:23
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Saturday, January 17, 2015 17:03:11
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Saturday, January 17, 2015 15:02:05
[WLAN access rejected: incorrect security] from MAC address 40:b3:95:67:22:0d, Saturday, January 17, 2015 09:30:27
[Internet connected] IP address: 192.168.1.80, Saturday, January 17, 2015 09:24:23
[DoS Attack: ARP Attack] from source: 192.168.1.97, Saturday, January 17, 2015 06:32:06
[Time synchronized with NTP server] Saturday, January 17, 2015 01:27:47
[Internet connected] IP address: 192.168.1.80, Friday, January 16, 2015 21:24:23
[WLAN access rejected: incorrect security] from MAC address d0:22:be:ad:ac:f0, Friday, January 16, 2015 14:21:29
[Internet connected] IP address: 192.168.1.80, Friday, January 16, 2015 09:24:23
[Time synchronized with NTP server] Friday, January 16, 2015 01:27:45
[Internet connected] IP address: 192.168.1.80, Thursday, January 15, 2015 09:24:23
[Time synchronized with NTP server] Thursday, January 15, 2015 01:27:44
[Internet connected] IP address: 192.168.1.80, Wednesday, January 14, 2015 21:24:23
[WLAN access rejected: incorrect security] from MAC address b4:18:d1:61:34:28, Wednesday, January 14, 2015 14:31:05
[Internet connected] IP address: 192.168.1.80, Wednesday, January 14, 2015 09:24:23
[Time synchronized with NTP server] Wednesday, January 14, 2015 01:27:43
[Internet connected] IP address: 192.168.1.80, Tuesday, January 13, 2015 21:24:24
[WLAN access rejected: incorrect security] from MAC address 8c:3a:e3:15:c2:79, Tuesday, January 13, 2015 20:03:44
[DoS Attack: ARP Attack] from source: 192.168.1.149, Tuesday, January 13, 2015 16:57:28
[WLAN access rejected: incorrect security] from MAC address 14:10:9f:b2:11:da, Tuesday, January 13, 2015 16:31:24
[WLAN access rejected: incorrect security] from MAC address 40:78:6a:47:7e:53, Tuesday, January 13, 2015 12:49:47
[Internet connected] IP address: 192.168.1.80, Tuesday, January 13, 2015 09:24:23
[DoS Attack: ARP Attack] from source: 192.168.1.34, Tuesday, January 13, 2015 05:53:25
[DoS Attack: ARP Attack] from source: 192.168.1.97, Tuesday, January 13, 2015 04:57:44
[Time synchronized with NTP server] Tuesday, January 13, 2015 01:27:42
[Internet connected] IP address: 192.168.1.80, Monday, January 12, 2015 21:24:24
[WLAN access rejected: incorrect security] from MAC address 8c:3a:e3:15:c2:79, Monday, January 12, 2015 19:56:27
[Internet connected] IP address: 192.168.1.80, Monday, January 12, 2015 09:24:23
[Time synchronized with NTP server] Monday, January 12, 2015 01:27:41
[Internet connected] IP address: 192.168.1.80, Sunday, January 11, 2015 09:24:23
[Time synchronized with NTP server] Sunday, January 11, 2015 01:27:39
[Internet connected] IP address: 192.168.1.80, Saturday, January 10, 2015 21:24:24
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Saturday, January 10, 2015 16:13:51
[WLAN access rejected: incorrect security] from MAC address dc:86:d8:8b:46:db, Saturday, January 10, 2015 12:59:59
[Internet connected] IP address: 192.168.1.80, Saturday, January 10, 2015 09:24:23
[DoS Attack: ARP Attack] from source: 192.168.1.97, Saturday, January 10, 2015 05:52:22
[Time synchronized with NTP server] Saturday, January 10, 2015 01:27:38
[Internet connected] IP address: 192.168.1.80, Friday, January 09, 2015 21:24:23
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Friday, January 09, 2015 17:37:19
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Friday, January 09, 2015 15:22:13
[DoS Attack: ARP Attack] from source: 192.168.1.97, Friday, January 09, 2015 13:24:07
[WLAN access rejected: incorrect security] from MAC address 04:f1:3e:e0:2e:f1, Friday, January 09, 2015 10:21:17
[Internet connected] IP address: 192.168.1.80, Friday, January 09, 2015 09:24:22
[WLAN access rejected: incorrect security] from MAC address 60:92:17:35:56:fa, Friday, January 09, 2015 08:49:22
[Internet connected] IP address: 192.168.1.80, Thursday, January 08, 2015 21:24:22
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Thursday, January 08, 2015 19:46:56
[Time synchronized with NTP server] Thursday, January 08, 2015 17:11:18
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Thursday, January 08, 2015 16:50:28
[DoS Attack: ARP Attack] from source: 192.168.1.97, Thursday, January 08, 2015 14:08:26
[Internet connected] IP address: 192.168.1.80, Wednesday, January 07, 2015 21:24:21
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Wednesday, January 07, 2015 17:43:17
[Time synchronized with NTP server] Wednesday, January 07, 2015 17:11:17
[WLAN access rejected: incorrect security] from MAC address 04:e5:36:db:6c:96, Wednesday, January 07, 2015 14:10:34
[WLAN access rejected: incorrect security] from MAC address cc:c3:ea:01:24:73, Wednesday, January 07, 2015 11:12:13
[Internet connected] IP address: 192.168.1.80, Wednesday, January 07, 2015 09:24:21
[WLAN access rejected: incorrect security] from MAC address f8:e0:79:f5:cb:4f, Wednesday, January 07, 2015 08:55:18
[DoS Attack: ARP Attack] from source: 192.168.1.149, Tuesday, January 06, 2015 22:19:13
[Internet connected] IP address: 192.168.1.80, Tuesday, January 06, 2015 21:24:21
[DoS Attack: ARP Attack] from source: 192.168.1.149, Tuesday, January 06, 2015 19:53:16
[Time synchronized with NTP server] Tuesday, January 06, 2015 17:11:15
[Internet connected] IP address: 192.168.1.80, Tuesday, January 06, 2015 09:24:21
[DoS Attack: ARP Attack] from source: 192.168.1.149, Monday, January 05, 2015 22:07:41
[Internet connected] IP address: 192.168.1.80, Monday, January 05, 2015 21:24:21
[DoS Attack: ARP Attack] from source: 192.168.1.149, Monday, January 05, 2015 18:53:31
[Time synchronized with NTP server] Monday, January 05, 2015 17:03:13
[DoS Attack: ARP Attack] from source: 192.168.1.149, Monday, January 05, 2015 16:53:23
[WLAN access rejected: incorrect security] from MAC address f8:27:93:32:5c:46, Monday, January 05, 2015 13:35:04
[Internet connected] IP address: 192.168.1.80, Monday, January 05, 2015 09:24:22
[DoS Attack: ARP Attack] from source: 192.168.1.97, Monday, January 05, 2015 07:42:33
[WLAN access rejected: incorrect security] from MAC address dc:86:d8:8b:46:db, Monday, January 05, 2015 07:07:15
[DoS Attack: ARP Attack] from source: 192.168.1.149, Sunday, January 04, 2015 21:29:22
[Internet connected] IP address: 192.168.1.80, Sunday, January 04, 2015 21:24:21
[DoS Attack: ARP Attack] from source: 192.168.1.149, Sunday, January 04, 2015 18:40:04
[Time synchronized with NTP server] Sunday, January 04, 2015 17:03:12
[DoS Attack: ARP Attack] from source: 192.168.1.149, Sunday, January 04, 2015 10:36:29
[Internet connected] IP address: 192.168.1.80, Sunday, January 04, 2015 09:24:22
[DoS Attack: ARP Attack] from source: 192.168.1.149, Saturday, January 03, 2015 21:43:41
[Internet connected] IP address: 192.168.1.80, Saturday, January 03, 2015 21:24:21
[DoS Attack: ARP Attack] from source: 192.168.1.97, Saturday, January 03, 2015 19:42:23
[DoS Attack: ARP Attack] from source: 192.168.1.149, Saturday, January 03, 2015 17:28:32
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Saturday, January 03, 2015 16:57:40
[Time synchronized with NTP server] Saturday, January 03, 2015 16:57:04
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Saturday, January 03, 2015 15:15:37
[Internet connected] IP address: 192.168.1.80, Saturday, January 03, 2015 09:24:22
[DoS Attack: ARP Attack] from source: 192.168.1.149, Saturday, January 03, 2015 05:20:35
[Internet connected] IP address: 192.168.1.80, Friday, January 02, 2015 21:24:21
[WLAN access rejected: incorrect security] from MAC address e0:b5:2d:07:cf:dc, Friday, January 02, 2015 20:09:57
[DoS Attack: ARP Attack] from source: 192.168.1.149, Friday, January 02, 2015 17:54:16
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Friday, January 02, 2015 17:53:16
[Time synchronized with NTP server] Friday, January 02, 2015 16:57:03
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Friday, January 02, 2015 16:04:29
[DoS Attack: ARP Attack] from source: 192.168.1.149, Friday, January 02, 2015 14:40:18
[WLAN access rejected: incorrect security] from MAC address 00:61:71:c9:7c:97, Friday, January 02, 2015 11:53:49
[Internet connected] IP address: 192.168.1.80, Friday, January 02, 2015 09:24:22
[DoS Attack: ARP Attack] from source: 192.168.1.149, Friday, January 02, 2015 05:47:13
[Internet connected] IP address: 192.168.1.80, Thursday, January 01, 2015 21:24:21
[Time synchronized with NTP server] Thursday, January 01, 2015 16:57:02
[WLAN access rejected: incorrect security] from MAC address b0:35:8d:b5:68:c8, Thursday, January 01, 2015 13:28:02
[Internet connected] IP address: 192.168.1.80, Wednesday, December 31, 2014 21:24:20
[Time synchronized with NTP server] Wednesday, December 31, 2014 16:57:01
[Internet connected] IP address: 192.168.1.80, Wednesday, December 31, 2014 09:24:20
[DoS Attack: ARP Attack] from source: 192.168.1.149, Wednesday, December 31, 2014 04:17:22
[Internet connected] IP address: 192.168.1.80, Tuesday, December 30, 2014 21:24:19
[DoS Attack: ARP Attack] from source: 192.168.1.149, Tuesday, December 30, 2014 17:00:47
[Time synchronized with NTP server] Tuesday, December 30, 2014 16:57:00
[DoS Attack: ARP Attack] from source: 192.168.1.97, Tuesday, December 30, 2014 14:50:48
[Internet connected] IP address: 192.168.1.80, Tuesday, December 30, 2014 09:24:19
[DoS Attack: ARP Attack] from source: 192.168.1.149, Tuesday, December 30, 2014 02:25:56
[Internet connected] IP address: 192.168.1.80, Monday, December 29, 2014 21:24:19
[DoS Attack: ARP Attack] from source: 192.168.1.149, Monday, December 29, 2014 17:23:54
[Time synchronized with NTP server] Monday, December 29, 2014 16:56:58
[WLAN access rejected: incorrect security] from MAC address 7c:61:93:92:fd:79, Monday, December 29, 2014 13:33:49
[Internet connected] IP address: 192.168.1.80, Monday, December 29, 2014 04:54:19
[DoS Attack: ARP Attack] from source: 192.168.1.149, Sunday, December 28, 2014 18:05:52
[Time synchronized with NTP server] Sunday, December 28, 2014 16:54:57
[Internet connected] IP address: 192.168.1.80, Sunday, December 28, 2014 04:54:19
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Sunday, December 28, 2014 00:35:36
[Time synchronized with NTP server] Saturday, December 27, 2014 16:54:56
[Internet connected] IP address: 192.168.1.80, Saturday, December 27, 2014 16:54:19
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Saturday, December 27, 2014 16:03:41
[Internet connected] IP address: 192.168.1.80, Saturday, December 27, 2014 04:54:19
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Friday, December 26, 2014 17:28:56
[Time synchronized with NTP server] Friday, December 26, 2014 16:54:55
[Internet connected] IP address: 192.168.1.80, Friday, December 26, 2014 16:54:20
[WLAN access rejected: incorrect security] from MAC address 2c:be:08:db:86:33, Friday, December 26, 2014 16:31:36
[Internet connected] IP address: 192.168.1.80, Friday, December 26, 2014 04:54:19
[WLAN access rejected: incorrect security] from MAC address fc:c2:de:21:2c:27, Thursday, December 25, 2014 20:37:31
[WLAN access rejected: incorrect security] from MAC address cc:95:d7:39:76:a0, Thursday, December 25, 2014 17:16:04
[Time synchronized with NTP server] Thursday, December 25, 2014 16:54:53
[Internet connected] IP address: 192.168.1.80, Thursday, December 25, 2014 04:54:19
[WLAN access rejected: incorrect security] from MAC address 5c:97:f3:1c:1f:fb, Wednesday, December 24, 2014 18:07:11
[Time synchronized with NTP server] Wednesday, December 24, 2014 16:54:52
[Internet connected] IP address: 192.168.1.80, Wednesday, December 24, 2014 04:54:18
[Time synchronized with NTP server] Tuesday, December 23, 2014 16:54:51
[Internet connected] IP address: 192.168.1.80, Tuesday, December 23, 2014 04:54:18
Any suggestions? Do you think this is caused from within or from one of the neighbors?
Attachments
NetworkTrafficNormal.JPG
NetworkTraffic.JPG

User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

#2

Post by Crash2009 » Sun Feb 08, 2015 9:22 pm

The code below is copied from Asus AP 192.168.1.97

Nothing really jumps out at me except for all the (rc_service: udhcpc_lan 9944:notify_rc stop_dnsmasq) entrys. Seems a little odd that the dns client needs to update so often.

I have since upgraded the firmware on this one too.

Code: Select all


Nov  1 04:26:19 rc_service: udhcpc_lan 27608:notify_rc stop_dnsmasq
Nov  1 04:26:19 rc_service: udhcpc_lan 27608:notify_rc start_dnsmasq
Nov  1 16:26:20 rc_service: udhcpc_lan 27900:notify_rc stop_dnsmasq
Nov  1 16:26:20 rc_service: udhcpc_lan 27900:notify_rc start_dnsmasq
Nov  1 16:26:20 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  2 03:26:24 rc_service: udhcpc_lan 28192:notify_rc stop_dnsmasq
Nov  2 03:26:24 rc_service: udhcpc_lan 28192:notify_rc start_dnsmasq
Nov  2 15:26:25 rc_service: udhcpc_lan 28484:notify_rc stop_dnsmasq
Nov  2 15:26:25 rc_service: udhcpc_lan 28484:notify_rc start_dnsmasq
Nov  2 15:26:25 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  3 03:26:29 rc_service: udhcpc_lan 28776:notify_rc stop_dnsmasq
Nov  3 03:26:29 rc_service: udhcpc_lan 28776:notify_rc start_dnsmasq
Nov  3 03:26:29 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  3 15:26:33 rc_service: udhcpc_lan 29068:notify_rc stop_dnsmasq
Nov  3 15:26:33 rc_service: udhcpc_lan 29068:notify_rc start_dnsmasq
Nov  3 15:26:33 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  4 03:26:37 rc_service: udhcpc_lan 29360:notify_rc stop_dnsmasq
Nov  4 03:26:37 rc_service: udhcpc_lan 29360:notify_rc start_dnsmasq
Nov  4 03:26:37 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  4 15:26:41 rc_service: udhcpc_lan 29652:notify_rc stop_dnsmasq
Nov  4 15:26:41 rc_service: udhcpc_lan 29652:notify_rc start_dnsmasq
Nov  5 03:26:42 rc_service: udhcpc_lan 29944:notify_rc stop_dnsmasq
Nov  5 03:26:42 rc_service: udhcpc_lan 29944:notify_rc start_dnsmasq
Nov  5 03:26:42 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  5 15:26:46 rc_service: udhcpc_lan 30236:notify_rc stop_dnsmasq
Nov  5 15:26:46 rc_service: udhcpc_lan 30236:notify_rc start_dnsmasq
Nov  5 15:26:46 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  6 03:26:50 rc_service: udhcpc_lan 30528:notify_rc stop_dnsmasq
Nov  6 03:26:50 rc_service: udhcpc_lan 30528:notify_rc start_dnsmasq
Nov  6 03:26:50 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  6 15:26:53 rc_service: udhcpc_lan 30820:notify_rc stop_dnsmasq
Nov  6 15:26:53 rc_service: udhcpc_lan 30820:notify_rc start_dnsmasq
Nov  6 15:26:53 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  7 03:26:57 rc_service: udhcpc_lan 31112:notify_rc stop_dnsmasq
Nov  7 03:26:57 rc_service: udhcpc_lan 31112:notify_rc start_dnsmasq
Nov  7 03:26:57 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  7 15:27:01 rc_service: udhcpc_lan 31404:notify_rc stop_dnsmasq
Nov  7 15:27:01 rc_service: udhcpc_lan 31404:notify_rc start_dnsmasq
Nov  8 03:27:02 rc_service: udhcpc_lan 31696:notify_rc stop_dnsmasq
Nov  8 03:27:02 rc_service: udhcpc_lan 31696:notify_rc start_dnsmasq
Nov  8 15:27:03 rc_service: udhcpc_lan 31988:notify_rc stop_dnsmasq
Nov  8 15:27:03 rc_service: udhcpc_lan 31988:notify_rc start_dnsmasq
Nov  8 15:27:03 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  9 03:27:07 rc_service: udhcpc_lan 32280:notify_rc stop_dnsmasq
Nov  9 03:27:07 rc_service: udhcpc_lan 32280:notify_rc start_dnsmasq
Nov  9 03:27:07 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov  9 15:27:11 rc_service: udhcpc_lan 32572:notify_rc stop_dnsmasq
Nov  9 15:27:11 rc_service: udhcpc_lan 32572:notify_rc start_dnsmasq
Nov  9 15:27:11 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov 10 03:27:15 rc_service: udhcpc_lan 402:notify_rc stop_dnsmasq
Nov 10 03:27:15 rc_service: udhcpc_lan 402:notify_rc start_dnsmasq
Nov 10 15:27:16 rc_service: udhcpc_lan 705:notify_rc stop_dnsmasq
Nov 10 15:27:16 rc_service: udhcpc_lan 705:notify_rc start_dnsmasq
Nov 10 15:27:16 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov 11 03:27:20 rc_service: udhcpc_lan 997:notify_rc stop_dnsmasq
Nov 11 03:27:20 rc_service: udhcpc_lan 997:notify_rc start_dnsmasq
Nov 11 15:27:21 rc_service: udhcpc_lan 1290:notify_rc stop_dnsmasq
Nov 11 15:27:21 rc_service: udhcpc_lan 1290:notify_rc start_dnsmasq
Nov 12 03:27:22 rc_service: udhcpc_lan 1582:notify_rc stop_dnsmasq
Nov 12 03:27:22 rc_service: udhcpc_lan 1582:notify_rc start_dnsmasq
Nov 12 15:27:23 rc_service: udhcpc_lan 1882:notify_rc stop_dnsmasq
Nov 12 15:27:23 rc_service: udhcpc_lan 1882:notify_rc start_dnsmasq
Nov 13 03:27:24 rc_service: udhcpc_lan 2174:notify_rc stop_dnsmasq
Nov 13 03:27:24 rc_service: udhcpc_lan 2174:notify_rc start_dnsmasq
Nov 13 03:27:24 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov 13 15:27:28 rc_service: udhcpc_lan 2467:notify_rc stop_dnsmasq
Nov 13 15:27:28 rc_service: udhcpc_lan 2467:notify_rc start_dnsmasq
Nov 13 15:27:28 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov 14 03:27:32 rc_service: udhcpc_lan 2759:notify_rc stop_dnsmasq
Nov 14 03:27:32 rc_service: udhcpc_lan 2759:notify_rc start_dnsmasq
Nov 14 15:27:33 rc_service: udhcpc_lan 3051:notify_rc stop_dnsmasq
Nov 14 15:27:33 rc_service: udhcpc_lan 3051:notify_rc start_dnsmasq
Nov 15 03:27:34 rc_service: udhcpc_lan 3343:notify_rc stop_dnsmasq
Nov 15 03:27:34 rc_service: udhcpc_lan 3343:notify_rc start_dnsmasq
Nov 15 15:27:35 rc_service: udhcpc_lan 3635:notify_rc stop_dnsmasq
Nov 15 15:27:35 rc_service: udhcpc_lan 3635:notify_rc start_dnsmasq
Nov 15 15:27:35 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov 16 03:27:39 rc_service: udhcpc_lan 3927:notify_rc stop_dnsmasq
Nov 16 03:27:39 rc_service: udhcpc_lan 3927:notify_rc start_dnsmasq
Nov 16 15:27:40 rc_service: udhcpc_lan 4219:notify_rc stop_dnsmasq
Nov 16 15:27:40 rc_service: udhcpc_lan 4219:notify_rc start_dnsmasq
Nov 17 03:27:41 rc_service: udhcpc_lan 4512:notify_rc stop_dnsmasq
Nov 17 03:27:41 rc_service: udhcpc_lan 4512:notify_rc start_dnsmasq
Nov 17 15:27:42 rc_service: udhcpc_lan 4804:notify_rc stop_dnsmasq
Nov 17 15:27:42 rc_service: udhcpc_lan 4804:notify_rc start_dnsmasq
Nov 18 03:27:43 rc_service: udhcpc_lan 5096:notify_rc stop_dnsmasq
Nov 18 03:27:43 rc_service: udhcpc_lan 5096:notify_rc start_dnsmasq
Nov 18 15:27:44 rc_service: udhcpc_lan 5388:notify_rc stop_dnsmasq
Nov 18 15:27:44 rc_service: udhcpc_lan 5388:notify_rc start_dnsmasq
Nov 19 03:27:45 rc_service: udhcpc_lan 5681:notify_rc stop_dnsmasq
Nov 19 03:27:45 rc_service: udhcpc_lan 5681:notify_rc start_dnsmasq
Nov 19 15:27:46 rc_service: udhcpc_lan 5973:notify_rc stop_dnsmasq
Nov 19 15:27:46 rc_service: udhcpc_lan 5973:notify_rc start_dnsmasq
Nov 20 03:27:47 rc_service: udhcpc_lan 6265:notify_rc stop_dnsmasq
Nov 20 03:27:47 rc_service: udhcpc_lan 6265:notify_rc start_dnsmasq
Nov 20 15:27:48 rc_service: udhcpc_lan 6557:notify_rc stop_dnsmasq
Nov 20 15:27:48 rc_service: udhcpc_lan 6557:notify_rc start_dnsmasq
Nov 21 03:27:50 rc_service: udhcpc_lan 6849:notify_rc stop_dnsmasq
Nov 21 03:27:50 rc_service: udhcpc_lan 6849:notify_rc start_dnsmasq
Nov 21 15:27:51 rc_service: udhcpc_lan 7141:notify_rc stop_dnsmasq
Nov 21 15:27:51 rc_service: udhcpc_lan 7141:notify_rc start_dnsmasq
Nov 22 03:27:52 rc_service: udhcpc_lan 7433:notify_rc stop_dnsmasq
Nov 22 03:27:52 rc_service: udhcpc_lan 7433:notify_rc start_dnsmasq
Nov 22 15:27:53 rc_service: udhcpc_lan 7725:notify_rc stop_dnsmasq
Nov 22 15:27:53 rc_service: udhcpc_lan 7725:notify_rc start_dnsmasq
Nov 23 03:27:54 rc_service: udhcpc_lan 8018:notify_rc stop_dnsmasq
Nov 23 03:27:54 rc_service: udhcpc_lan 8018:notify_rc start_dnsmasq
Nov 23 15:27:55 rc_service: udhcpc_lan 8310:notify_rc stop_dnsmasq
Nov 23 15:27:55 rc_service: udhcpc_lan 8310:notify_rc start_dnsmasq
Nov 24 03:27:56 rc_service: udhcpc_lan 8602:notify_rc stop_dnsmasq
Nov 24 03:27:56 rc_service: udhcpc_lan 8602:notify_rc start_dnsmasq
Nov 24 15:27:57 rc_service: udhcpc_lan 8894:notify_rc stop_dnsmasq
Nov 24 15:27:57 rc_service: udhcpc_lan 8894:notify_rc start_dnsmasq
Nov 25 03:27:58 rc_service: udhcpc_lan 9186:notify_rc stop_dnsmasq
Nov 25 03:27:58 rc_service: udhcpc_lan 9186:notify_rc start_dnsmasq
Nov 25 15:27:59 rc_service: udhcpc_lan 9478:notify_rc stop_dnsmasq
Nov 25 15:27:59 rc_service: udhcpc_lan 9478:notify_rc start_dnsmasq
Nov 26 03:28:00 rc_service: udhcpc_lan 9770:notify_rc stop_dnsmasq
Nov 26 03:28:00 rc_service: udhcpc_lan 9770:notify_rc start_dnsmasq
Nov 26 15:28:01 rc_service: udhcpc_lan 10062:notify_rc stop_dnsmasq
Nov 26 15:28:01 rc_service: udhcpc_lan 10062:notify_rc start_dnsmasq
Nov 27 03:28:02 rc_service: udhcpc_lan 10354:notify_rc stop_dnsmasq
Nov 27 03:28:02 rc_service: udhcpc_lan 10354:notify_rc start_dnsmasq
Nov 27 15:28:03 rc_service: udhcpc_lan 10646:notify_rc stop_dnsmasq
Nov 27 15:28:03 rc_service: udhcpc_lan 10646:notify_rc start_dnsmasq
Nov 27 15:28:03 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov 28 03:28:07 rc_service: udhcpc_lan 10939:notify_rc stop_dnsmasq
Nov 28 03:28:07 rc_service: udhcpc_lan 10939:notify_rc start_dnsmasq
Nov 28 03:28:07 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov 28 15:28:11 rc_service: udhcpc_lan 11231:notify_rc stop_dnsmasq
Nov 28 15:28:11 rc_service: udhcpc_lan 11231:notify_rc start_dnsmasq
Nov 28 15:28:11 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov 29 03:28:15 rc_service: udhcpc_lan 11523:notify_rc stop_dnsmasq
Nov 29 03:28:15 rc_service: udhcpc_lan 11523:notify_rc start_dnsmasq
Nov 29 15:28:16 rc_service: udhcpc_lan 11815:notify_rc stop_dnsmasq
Nov 29 15:28:16 rc_service: udhcpc_lan 11815:notify_rc start_dnsmasq
Nov 30 03:28:17 rc_service: udhcpc_lan 12107:notify_rc stop_dnsmasq
Nov 30 03:28:17 rc_service: udhcpc_lan 12107:notify_rc start_dnsmasq
Nov 30 03:28:17 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Nov 30 15:28:20 rc_service: udhcpc_lan 12399:notify_rc stop_dnsmasq
Nov 30 15:28:21 rc_service: udhcpc_lan 12399:notify_rc start_dnsmasq
Dec  1 03:28:22 rc_service: udhcpc_lan 12691:notify_rc stop_dnsmasq
Dec  1 03:28:22 rc_service: udhcpc_lan 12691:notify_rc start_dnsmasq
Dec  1 03:28:22 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec  1 15:28:25 rc_service: udhcpc_lan 12983:notify_rc stop_dnsmasq
Dec  1 15:28:25 rc_service: udhcpc_lan 12983:notify_rc start_dnsmasq
Dec  1 15:28:25 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec  2 03:28:29 rc_service: udhcpc_lan 13275:notify_rc stop_dnsmasq
Dec  2 03:28:29 rc_service: udhcpc_lan 13275:notify_rc start_dnsmasq
Dec  2 15:28:30 rc_service: udhcpc_lan 13567:notify_rc stop_dnsmasq
Dec  2 15:28:30 rc_service: udhcpc_lan 13567:notify_rc start_dnsmasq
Dec 31 20:00:12 syslogd started: BusyBox v1.17.4
Dec 31 20:00:12 kernel: klogd started: BusyBox v1.17.4 (2014-01-13 09:58:15 CST)
Dec 31 20:00:12 kernel: Linux version 2.6.36.4brcmarm (defjovi@F13) (gcc version 4.5.3 (Buildroot 2012.02) ) #31 SMP PREEMPT Mon Jan 13 10:10:01 CST 2014
Dec 31 20:00:12 kernel: CPU: ARMv7 Processor [413fc090] revision 0 (ARMv7), cr=10c53c7f
Dec 31 20:00:12 kernel: CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
Dec 31 20:00:12 kernel: Machine: Northstar Prototype
Dec 31 20:00:12 kernel: Ignoring unrecognised tag 0x00000000
Dec 31 20:00:12 kernel: Memory policy: ECC disabled, Data cache writealloc
Dec 31 20:00:12 kernel: Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 60416
Dec 31 20:00:12 kernel: Kernel command line: root=/dev/mtdblock2 console=ttyS0,115200 init=/sbin/preinit earlyprintk debug
Dec 31 20:00:12 kernel: Memory: 255508k/255508k available, 6636k reserved, 0K highmem
Dec 31 20:00:12 syslog: module ledtrig-usbdev not found in modules.dep
Dec 31 20:00:12 syslog: module leds-usb not found in modules.dep
Dec 31 20:00:12 kernel: Virtual kernel memory layout:
Dec 31 20:00:12 kernel:     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
Dec 31 20:00:12 kernel:     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
Dec 31 20:00:12 kernel:     DMA     : 0xf7e00000 - 0xffe00000   ( 128 MB)
Dec 31 20:00:12 kernel:     vmalloc : 0xd8800000 - 0xf0000000   ( 376 MB)
Dec 31 20:00:12 kernel:     lowmem  : 0xc0000000 - 0xd8000000   ( 384 MB)
Dec 31 20:00:12 kernel:     modules : 0xbf000000 - 0xc0000000   (  16 MB)
Dec 31 20:00:12 kernel:       .init : 0xc0008000 - 0xc003d000   ( 212 kB)
Dec 31 20:00:12 kernel:       .text : 0xc003d000 - 0xc03aa000   (3508 kB)
Dec 31 20:00:12 kernel:       .data : 0xc03c2000 - 0xc03e4f40   ( 140 kB)
Dec 31 20:00:12 kernel: External imprecise Data abort at addr=0x0, fsr=0x1c06 ignored.
Dec 31 20:00:12 kernel: Mount-cache hash table entries: 512
Dec 31 20:00:12 kernel: CPU1: Booted secondary processor
Dec 31 20:00:12 kernel: Found a AMD NAND flash:
Dec 31 20:00:12 kernel: Total size:  128MB
Dec 31 20:00:12 kernel: Block size:  128KB
Dec 31 20:00:12 kernel: Page Size:   2048B
Dec 31 20:00:12 kernel: OOB Size:    64B
Dec 31 20:00:12 kernel: Sector size: 512B
Dec 31 20:00:12 kernel: Spare size:  16B
Dec 31 20:00:12 kernel: ECC level:   8 (8-bit)
Dec 31 20:00:12 kernel: Device ID: 0x 1 0xf1 0x 0 0x1d 0x 1 0xf1
Dec 31 20:00:12 kernel: bio: create slab <bio-0> at 0
Dec 31 20:00:12 kernel: PCI: no core
Dec 31 20:00:12 kernel: PCI: no core
Dec 31 20:00:13 kernel: PCI: Fixing up bus 0
Dec 31 20:00:13 kernel: PCI: Fixing up bus 0
Dec 31 20:00:13 kernel: PCI: Fixing up bus 1
Dec 31 20:00:13 kernel: PCI: Fixing up bus 0
Dec 31 20:00:13 kernel: PCI: Fixing up bus 2
Dec 31 20:00:13 syslog: module fat not found in modules.dep
Dec 31 20:00:13 syslog: module vfat not found in modules.dep
Dec 31 20:00:13 kernel: VFS: Disk quotas dquot_6.5.2
Dec 31 20:00:13 kernel: Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
Dec 31 20:00:13 kernel: pflash: found no supported devices
Dec 31 20:00:13 kernel: bcmsflash: found no supported devices
Dec 31 20:00:13 kernel: Boot partition size = 524288(0x80000)
Dec 31 20:00:13 kernel: lookup_nflash_rootfs_offset: offset = 0x200000
Dec 31 20:00:13 kernel: nflash: squash filesystem with lzma found at block 28
Dec 31 20:00:13 kernel: Creating 4 MTD partitions on "nflash":
Dec 31 20:00:13 kernel: 0x000000000000-0x000000080000 : "boot"
Dec 31 20:00:13 kernel: 0x000000080000-0x000000200000 : "nvram"
Dec 31 20:00:13 kernel: 0x000000200000-0x000002000000 : "linux"
Dec 31 20:00:13 kernel: 0x00000039e528-0x000002000000 : "rootfs"
Dec 31 20:00:13 kernel: === PPTP init ===
Dec 31 20:00:13 kernel: Registering the dns_resolver key type
Dec 31 20:00:13 kernel: Spare area=64 eccbytes 56, ecc bytes located at:
Dec 31 20:00:13 kernel:  2 3 4 5 6 7 8 9 10 11 12 13 14 15 18 19 20 21 22 23 24 25 26 27 28 29 30 31 34 35 36 37 38 39 40 41 42 43 44 45 46 47 50 51 52 53 54 55 56 57 58 59 60 61 62 63
Dec 31 20:00:13 kernel: Available 7 bytes at (off,len):
Dec 31 20:00:13 kernel: (1,1) (16,2) (32,2) (48,2) (0,0) (0,0) (0,0) (0,0) 
Dec 31 20:00:13 kernel: Bad eraseblock 314 at 0x000002740000
Dec 31 20:00:13 kernel: Bad eraseblock 611 at 0x000004c60000
Dec 31 20:00:13 kernel: Options: NO_AUTOINCR,NO_READRDY,BBT_SCAN2NDPAGE,
Dec 31 20:00:13 kernel: Creating 1 MTD partitions on "brcmnand":
Dec 31 20:00:13 kernel: 0x000002000000-0x000008000000 : "brcmnand"
Dec 31 20:00:13 kernel: VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Dec 31 20:00:13 kernel: ctf: module license 'Proprietary' taints kernel.
Dec 31 20:00:13 kernel: Disabling lock debugging due to kernel taint
Dec 31 20:00:13 kernel: et_module_init: passivemode set to 0x0
Dec 31 20:00:13 kernel: et_module_init: txworkq set to 0x1
Dec 31 20:00:13 kernel: et_module_init: et_txq_thresh set to 0x400
Dec 31 20:00:13 kernel: eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.62 (r437318)
Dec 31 20:00:13 kernel: wl_module_init: passivemode set to 0x0
Dec 31 20:00:13 kernel: wl_module_init: txworkq set to 0x1
Dec 31 20:00:13 kernel: PCI: Enabling device 0001:01:00.0 (0140 -> 0142)
Dec 31 20:00:13 kernel: eth1: Broadcom BCMa8db 802.11 Wireless Controller 6.37.14.62 (r437318)
Dec 31 20:00:13 kernel: eth2: Broadcom BCM4360 802.11 Wireless Controller 6.37.14.62 (r437318)
Dec 31 20:00:13 kernel: SCSI subsystem initialized
Dec 31 20:00:13 kernel: jnl: driver (lke_8.9.0, Jan 13 2014 17:07:07, LBD=ON) loaded at bf5de000
Dec 31 20:00:13 kernel: ufsd:: trace mask set to 0000000f
Dec 31 20:00:13 kernel: ufsd: driver (lke_8.9.0 lke_8.9.0_r219253_b22, LBD=ON, delalloc, acl, ioctl, ugm, sd(1), wb, tr) loaded at bf5eb000
Dec 31 20:00:13 kernel: NTFS support included
Dec 31 20:00:13 kernel: Hfs+/HfsJ support included
Dec 31 20:00:13 kernel: optimized: speed
Dec 31 20:00:13 kernel: Build_for__Asus_RT-AC56U_k2.6.36_2013-11-07_lke_8.9.0_r219253_b22
Dec 31 20:00:13 kernel: xhci_hcd 0000:00:0c.0: Failed to enable MSI-X
Dec 31 20:00:13 kernel: xhci_hcd 0000:00:0c.0: failed to allocate MSI entry
Dec 31 20:00:13 kernel: usb usb1: No SuperSpeed endpoint companion for config 1  interface 0 altsetting 0 ep 129: using minimum values
Dec 31 20:00:15 rc_service: udhcpc_lan 505:notify_rc stop_dnsmasq
Dec 31 20:00:15 rc_service: udhcpc_lan 505:notify_rc start_dnsmasq
Dec 31 20:00:15 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 31 20:00:15 RT-AC56R: start httpd
Dec 31 20:00:20 disk monitor: be idle
Dec 31 20:00:21 rc_service: udhcpc_lan 505:notify_rc stop_ntpc
Dec 31 20:00:21 rc_service: udhcpc_lan 505:notify_rc start_ntpc
Dec 31 20:00:21 rc_service: waitting "stop_ntpc" via udhcpc_lan ...
Dec  2 23:36:26 rc_service: ntp 547:notify_rc restart_diskmon
Dec  2 23:36:27 disk monitor: be idle
Dec  3 11:36:26 rc_service: udhcpc_lan 845:notify_rc stop_dnsmasq
Dec  3 11:36:26 rc_service: udhcpc_lan 845:notify_rc start_dnsmasq
Dec  3 23:36:28 rc_service: udhcpc_lan 1137:notify_rc stop_dnsmasq
Dec  3 23:36:28 rc_service: udhcpc_lan 1137:notify_rc start_dnsmasq
Dec  3 23:36:28 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec  4 11:36:31 rc_service: udhcpc_lan 1429:notify_rc stop_dnsmasq
Dec  4 11:36:31 rc_service: udhcpc_lan 1429:notify_rc start_dnsmasq
Dec  4 11:36:31 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec  4 23:36:35 rc_service: udhcpc_lan 1722:notify_rc stop_dnsmasq
Dec  4 23:36:35 rc_service: udhcpc_lan 1722:notify_rc start_dnsmasq
Dec  4 23:36:35 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec  5 11:36:39 rc_service: udhcpc_lan 2014:notify_rc stop_dnsmasq
Dec  5 11:36:39 rc_service: udhcpc_lan 2014:notify_rc start_dnsmasq
Dec  5 11:36:39 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec  5 23:36:43 rc_service: udhcpc_lan 2306:notify_rc stop_dnsmasq
Dec  5 23:36:43 rc_service: udhcpc_lan 2306:notify_rc start_dnsmasq
Dec  6 11:36:44 rc_service: udhcpc_lan 2598:notify_rc stop_dnsmasq
Dec  6 11:36:44 rc_service: udhcpc_lan 2598:notify_rc start_dnsmasq
Dec  6 11:36:44 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec  6 23:36:48 rc_service: udhcpc_lan 2890:notify_rc stop_dnsmasq
Dec  6 23:36:48 rc_service: udhcpc_lan 2890:notify_rc start_dnsmasq
Dec  6 23:36:48 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec  7 11:36:52 rc_service: udhcpc_lan 3182:notify_rc stop_dnsmasq
Dec  7 11:36:52 rc_service: udhcpc_lan 3182:notify_rc start_dnsmasq
Dec  7 23:36:53 rc_service: udhcpc_lan 3474:notify_rc stop_dnsmasq
Dec  7 23:36:53 rc_service: udhcpc_lan 3474:notify_rc start_dnsmasq
Dec  8 11:36:54 rc_service: udhcpc_lan 3766:notify_rc stop_dnsmasq
Dec  8 11:36:54 rc_service: udhcpc_lan 3766:notify_rc start_dnsmasq
Dec  8 11:36:54 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec  8 23:36:58 rc_service: udhcpc_lan 4058:notify_rc stop_dnsmasq
Dec  8 23:36:58 rc_service: udhcpc_lan 4058:notify_rc start_dnsmasq
Dec  8 23:36:58 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec  9 11:37:02 rc_service: udhcpc_lan 4350:notify_rc stop_dnsmasq
Dec  9 11:37:02 rc_service: udhcpc_lan 4350:notify_rc start_dnsmasq
Dec  9 23:37:03 rc_service: udhcpc_lan 4642:notify_rc stop_dnsmasq
Dec  9 23:37:03 rc_service: udhcpc_lan 4642:notify_rc start_dnsmasq
Dec 10 11:37:04 rc_service: udhcpc_lan 4934:notify_rc stop_dnsmasq
Dec 10 11:37:04 rc_service: udhcpc_lan 4934:notify_rc start_dnsmasq
Dec 10 11:37:04 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 10 23:37:08 rc_service: udhcpc_lan 5226:notify_rc stop_dnsmasq
Dec 10 23:37:08 rc_service: udhcpc_lan 5226:notify_rc start_dnsmasq
Dec 10 23:37:08 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 11 11:37:12 rc_service: udhcpc_lan 5518:notify_rc stop_dnsmasq
Dec 11 11:37:12 rc_service: udhcpc_lan 5518:notify_rc start_dnsmasq
Dec 11 11:37:12 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 11 23:37:16 rc_service: udhcpc_lan 5810:notify_rc stop_dnsmasq
Dec 11 23:37:16 rc_service: udhcpc_lan 5810:notify_rc start_dnsmasq
Dec 11 23:37:16 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 12 11:37:20 rc_service: udhcpc_lan 6102:notify_rc stop_dnsmasq
Dec 12 11:37:20 rc_service: udhcpc_lan 6102:notify_rc start_dnsmasq
Dec 12 23:37:21 rc_service: udhcpc_lan 6394:notify_rc stop_dnsmasq
Dec 12 23:37:21 rc_service: udhcpc_lan 6394:notify_rc start_dnsmasq
Dec 13 11:37:22 rc_service: udhcpc_lan 6686:notify_rc stop_dnsmasq
Dec 13 11:37:22 rc_service: udhcpc_lan 6686:notify_rc start_dnsmasq
Dec 13 23:37:23 rc_service: udhcpc_lan 6978:notify_rc stop_dnsmasq
Dec 13 23:37:23 rc_service: udhcpc_lan 6978:notify_rc start_dnsmasq
Dec 14 11:37:24 rc_service: udhcpc_lan 7270:notify_rc stop_dnsmasq
Dec 14 11:37:24 rc_service: udhcpc_lan 7270:notify_rc start_dnsmasq
Dec 14 11:37:24 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 14 23:37:28 rc_service: udhcpc_lan 7562:notify_rc stop_dnsmasq
Dec 14 23:37:28 rc_service: udhcpc_lan 7562:notify_rc start_dnsmasq
Dec 15 11:37:29 rc_service: udhcpc_lan 7854:notify_rc stop_dnsmasq
Dec 15 11:37:29 rc_service: udhcpc_lan 7854:notify_rc start_dnsmasq
Dec 15 23:37:30 rc_service: udhcpc_lan 8146:notify_rc stop_dnsmasq
Dec 15 23:37:30 rc_service: udhcpc_lan 8146:notify_rc start_dnsmasq
Dec 15 23:37:30 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 16 11:37:34 rc_service: udhcpc_lan 8438:notify_rc stop_dnsmasq
Dec 16 11:37:34 rc_service: udhcpc_lan 8438:notify_rc start_dnsmasq
Dec 16 23:37:35 rc_service: udhcpc_lan 8730:notify_rc stop_dnsmasq
Dec 16 23:37:35 rc_service: udhcpc_lan 8730:notify_rc start_dnsmasq
Dec 17 11:37:36 rc_service: udhcpc_lan 9022:notify_rc stop_dnsmasq
Dec 17 11:37:36 rc_service: udhcpc_lan 9022:notify_rc start_dnsmasq
Dec 17 11:37:36 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 17 23:37:40 rc_service: udhcpc_lan 9314:notify_rc stop_dnsmasq
Dec 17 23:37:40 rc_service: udhcpc_lan 9314:notify_rc start_dnsmasq
Dec 18 11:37:41 rc_service: udhcpc_lan 9606:notify_rc stop_dnsmasq
Dec 18 11:37:41 rc_service: udhcpc_lan 9606:notify_rc start_dnsmasq
Dec 18 23:37:42 rc_service: udhcpc_lan 9898:notify_rc stop_dnsmasq
Dec 18 23:37:42 rc_service: udhcpc_lan 9898:notify_rc start_dnsmasq
Dec 19 11:37:43 rc_service: udhcpc_lan 10190:notify_rc stop_dnsmasq
Dec 19 11:37:43 rc_service: udhcpc_lan 10190:notify_rc start_dnsmasq
Dec 19 23:37:45 rc_service: udhcpc_lan 10482:notify_rc stop_dnsmasq
Dec 19 23:37:45 rc_service: udhcpc_lan 10482:notify_rc start_dnsmasq
Dec 20 11:37:46 rc_service: udhcpc_lan 10774:notify_rc stop_dnsmasq
Dec 20 11:37:46 rc_service: udhcpc_lan 10774:notify_rc start_dnsmasq
Dec 20 11:37:46 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 20 23:37:49 rc_service: udhcpc_lan 11066:notify_rc stop_dnsmasq
Dec 20 23:37:49 rc_service: udhcpc_lan 11066:notify_rc start_dnsmasq
Dec 20 23:37:49 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 21 11:37:53 rc_service: udhcpc_lan 11358:notify_rc stop_dnsmasq
Dec 21 11:37:53 rc_service: udhcpc_lan 11358:notify_rc start_dnsmasq
Dec 21 11:37:53 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 21 23:37:57 rc_service: udhcpc_lan 11650:notify_rc stop_dnsmasq
Dec 21 23:37:57 rc_service: udhcpc_lan 11650:notify_rc start_dnsmasq
Dec 21 23:37:57 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 22 11:38:01 rc_service: udhcpc_lan 11942:notify_rc stop_dnsmasq
Dec 22 11:38:01 rc_service: udhcpc_lan 11942:notify_rc start_dnsmasq
Dec 22 11:38:01 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 22 23:38:05 rc_service: udhcpc_lan 12234:notify_rc stop_dnsmasq
Dec 22 23:38:05 rc_service: udhcpc_lan 12234:notify_rc start_dnsmasq
Dec 23 11:38:06 rc_service: udhcpc_lan 12526:notify_rc stop_dnsmasq
Dec 23 11:38:06 rc_service: udhcpc_lan 12526:notify_rc start_dnsmasq
Dec 23 11:38:06 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 23 23:38:10 rc_service: udhcpc_lan 12818:notify_rc stop_dnsmasq
Dec 23 23:38:10 rc_service: udhcpc_lan 12818:notify_rc start_dnsmasq
Dec 23 23:38:10 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 24 11:38:14 rc_service: udhcpc_lan 13110:notify_rc stop_dnsmasq
Dec 24 11:38:14 rc_service: udhcpc_lan 13110:notify_rc start_dnsmasq
Dec 24 11:38:14 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 24 23:38:18 rc_service: udhcpc_lan 13402:notify_rc stop_dnsmasq
Dec 24 23:38:18 rc_service: udhcpc_lan 13402:notify_rc start_dnsmasq
Dec 24 23:38:18 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 25 11:38:22 rc_service: udhcpc_lan 13694:notify_rc stop_dnsmasq
Dec 25 11:38:22 rc_service: udhcpc_lan 13694:notify_rc start_dnsmasq
Dec 25 23:38:23 rc_service: udhcpc_lan 13986:notify_rc stop_dnsmasq
Dec 25 23:38:23 rc_service: udhcpc_lan 13986:notify_rc start_dnsmasq
Dec 26 11:38:24 rc_service: udhcpc_lan 14278:notify_rc stop_dnsmasq
Dec 26 11:38:24 rc_service: udhcpc_lan 14278:notify_rc start_dnsmasq
Dec 26 23:38:25 rc_service: udhcpc_lan 14570:notify_rc stop_dnsmasq
Dec 26 23:38:25 rc_service: udhcpc_lan 14570:notify_rc start_dnsmasq
Dec 26 23:38:25 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 27 11:38:29 rc_service: udhcpc_lan 14862:notify_rc stop_dnsmasq
Dec 27 11:38:29 rc_service: udhcpc_lan 14862:notify_rc start_dnsmasq
Dec 27 11:38:29 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 27 23:38:32 rc_service: udhcpc_lan 15154:notify_rc stop_dnsmasq
Dec 27 23:38:32 rc_service: udhcpc_lan 15154:notify_rc start_dnsmasq
Dec 27 23:38:32 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 28 11:38:36 rc_service: udhcpc_lan 15446:notify_rc stop_dnsmasq
Dec 28 11:38:36 rc_service: udhcpc_lan 15446:notify_rc start_dnsmasq
Dec 28 23:38:37 rc_service: udhcpc_lan 15738:notify_rc stop_dnsmasq
Dec 28 23:38:37 rc_service: udhcpc_lan 15738:notify_rc start_dnsmasq
Dec 29 11:38:38 rc_service: udhcpc_lan 16030:notify_rc stop_dnsmasq
Dec 29 11:38:38 rc_service: udhcpc_lan 16030:notify_rc start_dnsmasq
Dec 29 23:38:39 rc_service: udhcpc_lan 16322:notify_rc stop_dnsmasq
Dec 29 23:38:39 rc_service: udhcpc_lan 16322:notify_rc start_dnsmasq
Dec 29 23:38:39 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 30 11:38:43 rc_service: udhcpc_lan 16614:notify_rc stop_dnsmasq
Dec 30 11:38:43 rc_service: udhcpc_lan 16614:notify_rc start_dnsmasq
Dec 30 11:38:43 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 30 23:38:47 rc_service: udhcpc_lan 16906:notify_rc stop_dnsmasq
Dec 30 23:38:47 rc_service: udhcpc_lan 16906:notify_rc start_dnsmasq
Dec 31 11:38:48 rc_service: udhcpc_lan 17198:notify_rc stop_dnsmasq
Dec 31 11:38:48 rc_service: udhcpc_lan 17198:notify_rc start_dnsmasq
Dec 31 11:38:48 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 31 23:38:52 rc_service: udhcpc_lan 17490:notify_rc stop_dnsmasq
Dec 31 23:38:52 rc_service: udhcpc_lan 17490:notify_rc start_dnsmasq
Jan  1 11:38:53 rc_service: udhcpc_lan 17782:notify_rc stop_dnsmasq
Jan  1 11:38:53 rc_service: udhcpc_lan 17782:notify_rc start_dnsmasq
Jan  1 11:38:53 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan  1 23:38:57 rc_service: udhcpc_lan 18074:notify_rc stop_dnsmasq
Jan  1 23:38:57 rc_service: udhcpc_lan 18074:notify_rc start_dnsmasq
Jan  1 23:38:57 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan  2 11:39:01 rc_service: udhcpc_lan 18366:notify_rc stop_dnsmasq
Jan  2 11:39:01 rc_service: udhcpc_lan 18366:notify_rc start_dnsmasq
Jan  2 23:39:02 rc_service: udhcpc_lan 18658:notify_rc stop_dnsmasq
Jan  2 23:39:02 rc_service: udhcpc_lan 18658:notify_rc start_dnsmasq
Jan  2 23:39:02 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan  3 11:39:06 rc_service: udhcpc_lan 18950:notify_rc stop_dnsmasq
Jan  3 11:39:06 rc_service: udhcpc_lan 18950:notify_rc start_dnsmasq
Jan  3 11:39:06 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan  3 23:39:10 rc_service: udhcpc_lan 19242:notify_rc stop_dnsmasq
Jan  3 23:39:10 rc_service: udhcpc_lan 19242:notify_rc start_dnsmasq
Jan  3 23:39:10 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan  4 11:39:14 rc_service: udhcpc_lan 19534:notify_rc stop_dnsmasq
Jan  4 11:39:14 rc_service: udhcpc_lan 19534:notify_rc start_dnsmasq
Jan  4 11:39:14 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan  4 23:39:18 rc_service: udhcpc_lan 19826:notify_rc stop_dnsmasq
Jan  4 23:39:18 rc_service: udhcpc_lan 19826:notify_rc start_dnsmasq
Jan  4 23:39:18 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan  5 11:39:22 rc_service: udhcpc_lan 20118:notify_rc stop_dnsmasq
Jan  5 11:39:22 rc_service: udhcpc_lan 20118:notify_rc start_dnsmasq
Jan  5 23:39:23 rc_service: udhcpc_lan 20410:notify_rc stop_dnsmasq
Jan  5 23:39:23 rc_service: udhcpc_lan 20410:notify_rc start_dnsmasq
Jan  6 11:39:24 rc_service: udhcpc_lan 20702:notify_rc stop_dnsmasq
Jan  6 11:39:24 rc_service: udhcpc_lan 20702:notify_rc start_dnsmasq
Jan  6 23:39:25 rc_service: udhcpc_lan 20995:notify_rc stop_dnsmasq
Jan  6 23:39:25 rc_service: udhcpc_lan 20995:notify_rc start_dnsmasq
Jan  7 11:39:26 rc_service: udhcpc_lan 21287:notify_rc stop_dnsmasq
Jan  7 11:39:26 rc_service: udhcpc_lan 21287:notify_rc start_dnsmasq
Jan  7 11:39:26 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan  7 23:39:30 rc_service: udhcpc_lan 21579:notify_rc stop_dnsmasq
Jan  7 23:39:30 rc_service: udhcpc_lan 21579:notify_rc start_dnsmasq
Jan  7 23:39:30 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan  8 11:39:34 rc_service: udhcpc_lan 21871:notify_rc stop_dnsmasq
Jan  8 11:39:34 rc_service: udhcpc_lan 21871:notify_rc start_dnsmasq
Jan  8 11:39:34 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan  8 23:39:37 rc_service: udhcpc_lan 22163:notify_rc stop_dnsmasq
Jan  8 23:39:37 rc_service: udhcpc_lan 22163:notify_rc start_dnsmasq
Jan  9 11:39:39 rc_service: udhcpc_lan 22457:notify_rc stop_dnsmasq
Jan  9 11:39:39 rc_service: udhcpc_lan 22457:notify_rc start_dnsmasq
Jan  9 23:39:40 rc_service: udhcpc_lan 22749:notify_rc stop_dnsmasq
Jan  9 23:39:40 rc_service: udhcpc_lan 22749:notify_rc start_dnsmasq
Jan  9 23:39:40 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 31 20:00:12 syslogd started: BusyBox v1.17.4
Dec 31 20:00:12 kernel: klogd started: BusyBox v1.17.4 (2014-01-13 09:58:15 CST)
Dec 31 20:00:12 kernel: Linux version 2.6.36.4brcmarm (defjovi@F13) (gcc version 4.5.3 (Buildroot 2012.02) ) #31 SMP PREEMPT Mon Jan 13 10:10:01 CST 2014
Dec 31 20:00:12 kernel: CPU: ARMv7 Processor [413fc090] revision 0 (ARMv7), cr=10c53c7f
Dec 31 20:00:12 kernel: CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
Dec 31 20:00:12 kernel: Machine: Northstar Prototype
Dec 31 20:00:12 kernel: Ignoring unrecognised tag 0x00000000
Dec 31 20:00:12 kernel: Memory policy: ECC disabled, Data cache writealloc
Dec 31 20:00:12 kernel: Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 60416
Dec 31 20:00:12 kernel: Kernel command line: root=/dev/mtdblock2 console=ttyS0,115200 init=/sbin/preinit earlyprintk debug
Dec 31 20:00:12 kernel: Memory: 255508k/255508k available, 6636k reserved, 0K highmem
Dec 31 20:00:12 syslog: module ledtrig-usbdev not found in modules.dep
Dec 31 20:00:12 syslog: module leds-usb not found in modules.dep
Dec 31 20:00:12 kernel: Virtual kernel memory layout:
Dec 31 20:00:12 kernel:     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
Dec 31 20:00:12 kernel:     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
Dec 31 20:00:12 kernel:     DMA     : 0xf7e00000 - 0xffe00000   ( 128 MB)
Dec 31 20:00:12 kernel:     vmalloc : 0xd8800000 - 0xf0000000   ( 376 MB)
Dec 31 20:00:12 kernel:     lowmem  : 0xc0000000 - 0xd8000000   ( 384 MB)
Dec 31 20:00:12 kernel:     modules : 0xbf000000 - 0xc0000000   (  16 MB)
Dec 31 20:00:12 kernel:       .init : 0xc0008000 - 0xc003d000   ( 212 kB)
Dec 31 20:00:12 kernel:       .text : 0xc003d000 - 0xc03aa000   (3508 kB)
Dec 31 20:00:12 kernel:       .data : 0xc03c2000 - 0xc03e4f40   ( 140 kB)
Dec 31 20:00:12 kernel: External imprecise Data abort at addr=0x0, fsr=0x1c06 ignored.
Dec 31 20:00:12 kernel: Mount-cache hash table entries: 512
Dec 31 20:00:12 kernel: CPU1: Booted secondary processor
Dec 31 20:00:12 kernel: Found a AMD NAND flash:
Dec 31 20:00:12 kernel: Total size:  128MB
Dec 31 20:00:12 kernel: Block size:  128KB
Dec 31 20:00:12 kernel: Page Size:   2048B
Dec 31 20:00:12 kernel: OOB Size:    64B
Dec 31 20:00:12 kernel: Sector size: 512B
Dec 31 20:00:12 kernel: Spare size:  16B
Dec 31 20:00:12 kernel: ECC level:   8 (8-bit)
Dec 31 20:00:12 kernel: Device ID: 0x 1 0xf1 0x 0 0x1d 0x 1 0xf1
Dec 31 20:00:12 kernel: bio: create slab <bio-0> at 0
Dec 31 20:00:12 kernel: PCI: no core
Dec 31 20:00:12 kernel: PCI: no core
Dec 31 20:00:13 kernel: PCI: Fixing up bus 0
Dec 31 20:00:13 kernel: PCI: Fixing up bus 0
Dec 31 20:00:13 kernel: PCI: Fixing up bus 1
Dec 31 20:00:13 kernel: PCI: Fixing up bus 0
Dec 31 20:00:13 kernel: PCI: Fixing up bus 2
Dec 31 20:00:13 syslog: module fat not found in modules.dep
Dec 31 20:00:13 syslog: module vfat not found in modules.dep
Dec 31 20:00:13 kernel: VFS: Disk quotas dquot_6.5.2
Dec 31 20:00:13 kernel: Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
Dec 31 20:00:13 kernel: pflash: found no supported devices
Dec 31 20:00:13 kernel: bcmsflash: found no supported devices
Dec 31 20:00:13 kernel: Boot partition size = 524288(0x80000)
Dec 31 20:00:13 kernel: lookup_nflash_rootfs_offset: offset = 0x200000
Dec 31 20:00:13 kernel: nflash: squash filesystem with lzma found at block 28
Dec 31 20:00:13 kernel: Creating 4 MTD partitions on "nflash":
Dec 31 20:00:13 kernel: 0x000000000000-0x000000080000 : "boot"
Dec 31 20:00:13 kernel: 0x000000080000-0x000000200000 : "nvram"
Dec 31 20:00:13 kernel: 0x000000200000-0x000002000000 : "linux"
Dec 31 20:00:13 kernel: 0x00000039e528-0x000002000000 : "rootfs"
Dec 31 20:00:13 kernel: === PPTP init ===
Dec 31 20:00:13 kernel: Registering the dns_resolver key type
Dec 31 20:00:13 kernel: Spare area=64 eccbytes 56, ecc bytes located at:
Dec 31 20:00:13 kernel:  2 3 4 5 6 7 8 9 10 11 12 13 14 15 18 19 20 21 22 23 24 25 26 27 28 29 30 31 34 35 36 37 38 39 40 41 42 43 44 45 46 47 50 51 52 53 54 55 56 57 58 59 60 61 62 63
Dec 31 20:00:13 kernel: Available 7 bytes at (off,len):
Dec 31 20:00:13 kernel: (1,1) (16,2) (32,2) (48,2) (0,0) (0,0) (0,0) (0,0) 
Dec 31 20:00:13 kernel: Bad eraseblock 314 at 0x000002740000
Dec 31 20:00:13 kernel: Bad eraseblock 611 at 0x000004c60000
Dec 31 20:00:13 kernel: Options: NO_AUTOINCR,NO_READRDY,BBT_SCAN2NDPAGE,
Dec 31 20:00:13 kernel: Creating 1 MTD partitions on "brcmnand":
Dec 31 20:00:13 kernel: 0x000002000000-0x000008000000 : "brcmnand"
Dec 31 20:00:13 kernel: VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Dec 31 20:00:13 kernel: ctf: module license 'Proprietary' taints kernel.
Dec 31 20:00:13 kernel: Disabling lock debugging due to kernel taint
Dec 31 20:00:13 kernel: et_module_init: passivemode set to 0x0
Dec 31 20:00:13 kernel: et_module_init: txworkq set to 0x1
Dec 31 20:00:13 kernel: et_module_init: et_txq_thresh set to 0x400
Dec 31 20:00:13 kernel: eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.62 (r437318)
Dec 31 20:00:13 kernel: wl_module_init: passivemode set to 0x0
Dec 31 20:00:13 kernel: wl_module_init: txworkq set to 0x1
Dec 31 20:00:13 kernel: PCI: Enabling device 0001:01:00.0 (0140 -> 0142)
Dec 31 20:00:13 kernel: eth1: Broadcom BCMa8db 802.11 Wireless Controller 6.37.14.62 (r437318)
Dec 31 20:00:13 kernel: eth2: Broadcom BCM4360 802.11 Wireless Controller 6.37.14.62 (r437318)
Dec 31 20:00:13 kernel: SCSI subsystem initialized
Dec 31 20:00:13 kernel: jnl: driver (lke_8.9.0, Jan 13 2014 17:07:07, LBD=ON) loaded at bf5de000
Dec 31 20:00:13 kernel: ufsd:: trace mask set to 0000000f
Dec 31 20:00:13 kernel: ufsd: driver (lke_8.9.0 lke_8.9.0_r219253_b22, LBD=ON, delalloc, acl, ioctl, ugm, sd(1), wb, tr) loaded at bf5eb000
Dec 31 20:00:13 kernel: NTFS support included
Dec 31 20:00:13 kernel: Hfs+/HfsJ support included
Dec 31 20:00:13 kernel: optimized: speed
Dec 31 20:00:13 kernel: Build_for__Asus_RT-AC56U_k2.6.36_2013-11-07_lke_8.9.0_r219253_b22
Dec 31 20:00:13 kernel: xhci_hcd 0000:00:0c.0: Failed to enable MSI-X
Dec 31 20:00:13 kernel: xhci_hcd 0000:00:0c.0: failed to allocate MSI entry
Dec 31 20:00:13 kernel: usb usb1: No SuperSpeed endpoint companion for config 1  interface 0 altsetting 0 ep 129: using minimum values
Dec 31 20:00:15 RT-AC56R: start httpd
Dec 31 20:00:20 disk monitor: be idle
Dec 31 20:00:21 rc_service: udhcpc_lan 540:notify_rc stop_dnsmasq
Dec 31 20:00:21 rc_service: udhcpc_lan 540:notify_rc start_dnsmasq
Dec 31 20:00:21 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 31 20:00:22 rc_service: udhcpc_lan 540:notify_rc stop_ntpc
Dec 31 20:00:22 rc_service: waitting "start_dnsmasq" via udhcpc_lan ...
Dec 31 20:00:23 rc_service: udhcpc_lan 540:notify_rc start_ntpc
Dec 31 20:00:23 rc_service: waitting "stop_ntpc" via udhcpc_lan ...
Jan 10 01:01:31 rc_service: ntp 547:notify_rc restart_diskmon
Jan 10 01:01:32 disk monitor: be idle
Jan 10 13:01:32 rc_service: udhcpc_lan 845:notify_rc stop_dnsmasq
Jan 10 13:01:32 rc_service: udhcpc_lan 845:notify_rc start_dnsmasq
Jan 11 01:01:33 rc_service: udhcpc_lan 1137:notify_rc stop_dnsmasq
Jan 11 01:01:33 rc_service: udhcpc_lan 1137:notify_rc start_dnsmasq
Jan 11 13:01:34 rc_service: udhcpc_lan 1429:notify_rc stop_dnsmasq
Jan 11 13:01:34 rc_service: udhcpc_lan 1429:notify_rc start_dnsmasq
Jan 12 01:01:35 rc_service: udhcpc_lan 1721:notify_rc stop_dnsmasq
Jan 12 01:01:35 rc_service: udhcpc_lan 1721:notify_rc start_dnsmasq
Jan 12 01:01:35 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 12 13:01:39 rc_service: udhcpc_lan 2013:notify_rc stop_dnsmasq
Jan 12 13:01:39 rc_service: udhcpc_lan 2013:notify_rc start_dnsmasq
Jan 13 01:01:40 rc_service: udhcpc_lan 2305:notify_rc stop_dnsmasq
Jan 13 01:01:40 rc_service: udhcpc_lan 2305:notify_rc start_dnsmasq
Jan 13 13:01:41 rc_service: udhcpc_lan 2597:notify_rc stop_dnsmasq
Jan 13 13:01:41 rc_service: udhcpc_lan 2597:notify_rc start_dnsmasq
Jan 14 01:01:42 rc_service: udhcpc_lan 2890:notify_rc stop_dnsmasq
Jan 14 01:01:42 rc_service: udhcpc_lan 2890:notify_rc start_dnsmasq
Jan 14 01:01:42 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 14 13:01:46 rc_service: udhcpc_lan 3182:notify_rc stop_dnsmasq
Jan 14 13:01:46 rc_service: udhcpc_lan 3182:notify_rc start_dnsmasq
Jan 14 13:01:46 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 15 01:01:50 rc_service: udhcpc_lan 3474:notify_rc stop_dnsmasq
Jan 15 01:01:50 rc_service: udhcpc_lan 3474:notify_rc start_dnsmasq
Jan 15 13:01:51 rc_service: udhcpc_lan 3766:notify_rc stop_dnsmasq
Jan 15 13:01:51 rc_service: udhcpc_lan 3766:notify_rc start_dnsmasq
Jan 15 13:01:51 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 16 01:01:55 rc_service: udhcpc_lan 4058:notify_rc stop_dnsmasq
Jan 16 01:01:55 rc_service: udhcpc_lan 4058:notify_rc start_dnsmasq
Jan 16 13:01:56 rc_service: udhcpc_lan 4350:notify_rc stop_dnsmasq
Jan 16 13:01:56 rc_service: udhcpc_lan 4350:notify_rc start_dnsmasq
Jan 17 01:01:57 rc_service: udhcpc_lan 4642:notify_rc stop_dnsmasq
Jan 17 01:01:57 rc_service: udhcpc_lan 4642:notify_rc start_dnsmasq
Jan 17 13:01:58 rc_service: udhcpc_lan 4934:notify_rc stop_dnsmasq
Jan 17 13:01:58 rc_service: udhcpc_lan 4934:notify_rc start_dnsmasq
Jan 18 01:01:59 rc_service: udhcpc_lan 5226:notify_rc stop_dnsmasq
Jan 18 01:01:59 rc_service: udhcpc_lan 5226:notify_rc start_dnsmasq
Jan 18 01:01:59 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 18 13:02:03 rc_service: udhcpc_lan 5518:notify_rc stop_dnsmasq
Jan 18 13:02:03 rc_service: udhcpc_lan 5518:notify_rc start_dnsmasq
Jan 18 13:02:03 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 19 01:02:07 rc_service: udhcpc_lan 5810:notify_rc stop_dnsmasq
Jan 19 01:02:07 rc_service: udhcpc_lan 5810:notify_rc start_dnsmasq
Jan 19 13:02:08 rc_service: udhcpc_lan 6102:notify_rc stop_dnsmasq
Jan 19 13:02:08 rc_service: udhcpc_lan 6102:notify_rc start_dnsmasq
Jan 19 13:02:08 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 20 01:02:12 rc_service: udhcpc_lan 6394:notify_rc stop_dnsmasq
Jan 20 01:02:12 rc_service: udhcpc_lan 6394:notify_rc start_dnsmasq
Jan 20 13:02:13 rc_service: udhcpc_lan 6686:notify_rc stop_dnsmasq
Jan 20 13:02:13 rc_service: udhcpc_lan 6686:notify_rc start_dnsmasq
Jan 20 13:02:13 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 21 01:02:17 rc_service: udhcpc_lan 6978:notify_rc stop_dnsmasq
Jan 21 01:02:17 rc_service: udhcpc_lan 6978:notify_rc start_dnsmasq
Jan 21 13:02:18 rc_service: udhcpc_lan 7270:notify_rc stop_dnsmasq
Jan 21 13:02:18 rc_service: udhcpc_lan 7270:notify_rc start_dnsmasq
Jan 22 01:02:19 rc_service: udhcpc_lan 7562:notify_rc stop_dnsmasq
Jan 22 01:02:19 rc_service: udhcpc_lan 7562:notify_rc start_dnsmasq
Jan 22 01:02:19 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 22 13:02:23 rc_service: udhcpc_lan 7860:notify_rc stop_dnsmasq
Jan 22 13:02:23 rc_service: udhcpc_lan 7860:notify_rc start_dnsmasq
Jan 23 01:02:24 rc_service: udhcpc_lan 8152:notify_rc stop_dnsmasq
Jan 23 01:02:24 rc_service: udhcpc_lan 8152:notify_rc start_dnsmasq
Jan 23 13:02:25 rc_service: udhcpc_lan 8444:notify_rc stop_dnsmasq
Jan 23 13:02:25 rc_service: udhcpc_lan 8444:notify_rc start_dnsmasq
Jan 24 01:02:26 rc_service: udhcpc_lan 8736:notify_rc stop_dnsmasq
Jan 24 01:02:26 rc_service: udhcpc_lan 8736:notify_rc start_dnsmasq
Jan 24 13:02:27 rc_service: udhcpc_lan 9028:notify_rc stop_dnsmasq
Jan 24 13:02:27 rc_service: udhcpc_lan 9028:notify_rc start_dnsmasq
Jan 25 01:02:28 rc_service: udhcpc_lan 9320:notify_rc stop_dnsmasq
Jan 25 01:02:28 rc_service: udhcpc_lan 9320:notify_rc start_dnsmasq
Jan 25 13:02:29 rc_service: udhcpc_lan 9612:notify_rc stop_dnsmasq
Jan 25 13:02:29 rc_service: udhcpc_lan 9612:notify_rc start_dnsmasq
Dec 31 20:00:12 syslogd started: BusyBox v1.17.4
Dec 31 20:00:12 kernel: klogd started: BusyBox v1.17.4 (2014-01-13 09:58:15 CST)
Dec 31 20:00:12 kernel: Linux version 2.6.36.4brcmarm (defjovi@F13) (gcc version 4.5.3 (Buildroot 2012.02) ) #31 SMP PREEMPT Mon Jan 13 10:10:01 CST 2014
Dec 31 20:00:12 kernel: CPU: ARMv7 Processor [413fc090] revision 0 (ARMv7), cr=10c53c7f
Dec 31 20:00:12 kernel: CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
Dec 31 20:00:12 kernel: Machine: Northstar Prototype
Dec 31 20:00:12 kernel: Ignoring unrecognised tag 0x00000000
Dec 31 20:00:12 kernel: Memory policy: ECC disabled, Data cache writealloc
Dec 31 20:00:12 kernel: Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 60416
Dec 31 20:00:12 kernel: Kernel command line: root=/dev/mtdblock2 console=ttyS0,115200 init=/sbin/preinit earlyprintk debug
Dec 31 20:00:12 kernel: Memory: 255508k/255508k available, 6636k reserved, 0K highmem
Dec 31 20:00:12 syslog: module ledtrig-usbdev not found in modules.dep
Dec 31 20:00:12 syslog: module leds-usb not found in modules.dep
Dec 31 20:00:12 kernel: Virtual kernel memory layout:
Dec 31 20:00:12 kernel:     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
Dec 31 20:00:12 kernel:     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
Dec 31 20:00:12 kernel:     DMA     : 0xf7e00000 - 0xffe00000   ( 128 MB)
Dec 31 20:00:12 kernel:     vmalloc : 0xd8800000 - 0xf0000000   ( 376 MB)
Dec 31 20:00:12 kernel:     lowmem  : 0xc0000000 - 0xd8000000   ( 384 MB)
Dec 31 20:00:12 kernel:     modules : 0xbf000000 - 0xc0000000   (  16 MB)
Dec 31 20:00:12 kernel:       .init : 0xc0008000 - 0xc003d000   ( 212 kB)
Dec 31 20:00:12 kernel:       .text : 0xc003d000 - 0xc03aa000   (3508 kB)
Dec 31 20:00:12 kernel:       .data : 0xc03c2000 - 0xc03e4f40   ( 140 kB)
Dec 31 20:00:12 kernel: External imprecise Data abort at addr=0x0, fsr=0x1c06 ignored.
Dec 31 20:00:12 kernel: Mount-cache hash table entries: 512
Dec 31 20:00:12 kernel: CPU1: Booted secondary processor
Dec 31 20:00:12 kernel: Found a AMD NAND flash:
Dec 31 20:00:12 kernel: Total size:  128MB
Dec 31 20:00:12 kernel: Block size:  128KB
Dec 31 20:00:12 kernel: Page Size:   2048B
Dec 31 20:00:12 kernel: OOB Size:    64B
Dec 31 20:00:12 kernel: Sector size: 512B
Dec 31 20:00:12 kernel: Spare size:  16B
Dec 31 20:00:12 kernel: ECC level:   8 (8-bit)
Dec 31 20:00:12 kernel: Device ID: 0x 1 0xf1 0x 0 0x1d 0x 1 0xf1
Dec 31 20:00:12 kernel: bio: create slab <bio-0> at 0
Dec 31 20:00:12 kernel: PCI: no core
Dec 31 20:00:12 kernel: PCI: no core
Dec 31 20:00:13 kernel: PCI: Fixing up bus 0
Dec 31 20:00:13 kernel: PCI: Fixing up bus 0
Dec 31 20:00:13 kernel: PCI: Fixing up bus 1
Dec 31 20:00:13 kernel: PCI: Fixing up bus 0
Dec 31 20:00:13 kernel: PCI: Fixing up bus 2
Dec 31 20:00:13 syslog: module fat not found in modules.dep
Dec 31 20:00:13 syslog: module vfat not found in modules.dep
Dec 31 20:00:13 kernel: VFS: Disk quotas dquot_6.5.2
Dec 31 20:00:13 kernel: Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
Dec 31 20:00:13 kernel: pflash: found no supported devices
Dec 31 20:00:13 kernel: bcmsflash: found no supported devices
Dec 31 20:00:13 kernel: Boot partition size = 524288(0x80000)
Dec 31 20:00:13 kernel: lookup_nflash_rootfs_offset: offset = 0x200000
Dec 31 20:00:13 kernel: nflash: squash filesystem with lzma found at block 28
Dec 31 20:00:13 kernel: Creating 4 MTD partitions on "nflash":
Dec 31 20:00:13 kernel: 0x000000000000-0x000000080000 : "boot"
Dec 31 20:00:13 kernel: 0x000000080000-0x000000200000 : "nvram"
Dec 31 20:00:13 kernel: 0x000000200000-0x000002000000 : "linux"
Dec 31 20:00:13 kernel: 0x00000039e528-0x000002000000 : "rootfs"
Dec 31 20:00:13 kernel: === PPTP init ===
Dec 31 20:00:13 kernel: Registering the dns_resolver key type
Dec 31 20:00:13 kernel: Spare area=64 eccbytes 56, ecc bytes located at:
Dec 31 20:00:13 kernel:  2 3 4 5 6 7 8 9 10 11 12 13 14 15 18 19 20 21 22 23 24 25 26 27 28 29 30 31 34 35 36 37 38 39 40 41 42 43 44 45 46 47 50 51 52 53 54 55 56 57 58 59 60 61 62 63
Dec 31 20:00:13 kernel: Available 7 bytes at (off,len):
Dec 31 20:00:13 kernel: (1,1) (16,2) (32,2) (48,2) (0,0) (0,0) (0,0) (0,0) 
Dec 31 20:00:13 kernel: Bad eraseblock 314 at 0x000002740000
Dec 31 20:00:13 kernel: Bad eraseblock 611 at 0x000004c60000
Dec 31 20:00:13 kernel: Options: NO_AUTOINCR,NO_READRDY,BBT_SCAN2NDPAGE,
Dec 31 20:00:13 kernel: Creating 1 MTD partitions on "brcmnand":
Dec 31 20:00:13 kernel: 0x000002000000-0x000008000000 : "brcmnand"
Dec 31 20:00:13 kernel: VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Dec 31 20:00:13 kernel: ctf: module license 'Proprietary' taints kernel.
Dec 31 20:00:13 kernel: Disabling lock debugging due to kernel taint
Dec 31 20:00:13 kernel: et_module_init: passivemode set to 0x0
Dec 31 20:00:13 kernel: et_module_init: txworkq set to 0x1
Dec 31 20:00:13 kernel: et_module_init: et_txq_thresh set to 0x400
Dec 31 20:00:13 kernel: eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.37.14.62 (r437318)
Dec 31 20:00:13 kernel: wl_module_init: passivemode set to 0x0
Dec 31 20:00:13 kernel: wl_module_init: txworkq set to 0x1
Dec 31 20:00:13 kernel: PCI: Enabling device 0001:01:00.0 (0140 -> 0142)
Dec 31 20:00:13 kernel: eth1: Broadcom BCMa8db 802.11 Wireless Controller 6.37.14.62 (r437318)
Dec 31 20:00:13 kernel: eth2: Broadcom BCM4360 802.11 Wireless Controller 6.37.14.62 (r437318)
Dec 31 20:00:13 kernel: SCSI subsystem initialized
Dec 31 20:00:13 kernel: jnl: driver (lke_8.9.0, Jan 13 2014 17:07:07, LBD=ON) loaded at bf5de000
Dec 31 20:00:13 kernel: ufsd:: trace mask set to 0000000f
Dec 31 20:00:13 kernel: ufsd: driver (lke_8.9.0 lke_8.9.0_r219253_b22, LBD=ON, delalloc, acl, ioctl, ugm, sd(1), wb, tr) loaded at bf5eb000
Dec 31 20:00:13 kernel: NTFS support included
Dec 31 20:00:13 kernel: Hfs+/HfsJ support included
Dec 31 20:00:13 kernel: optimized: speed
Dec 31 20:00:13 kernel: Build_for__Asus_RT-AC56U_k2.6.36_2013-11-07_lke_8.9.0_r219253_b22
Dec 31 20:00:13 kernel: xhci_hcd 0000:00:0c.0: Failed to enable MSI-X
Dec 31 20:00:13 kernel: xhci_hcd 0000:00:0c.0: failed to allocate MSI entry
Dec 31 20:00:13 kernel: usb usb1: No SuperSpeed endpoint companion for config 1  interface 0 altsetting 0 ep 129: using minimum values
Dec 31 20:00:15 rc_service: udhcpc_lan 507:notify_rc stop_dnsmasq
Dec 31 20:00:15 rc_service: udhcpc_lan 507:notify_rc start_dnsmasq
Dec 31 20:00:15 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Dec 31 20:00:15 RT-AC56R: start httpd
Dec 31 20:00:20 disk monitor: be idle
Dec 31 20:00:21 rc_service: udhcpc_lan 507:notify_rc stop_ntpc
Dec 31 20:00:21 rc_service: waitting "start_dnsmasq" via udhcpc_lan ...
Dec 31 20:00:22 rc_service: udhcpc_lan 507:notify_rc start_ntpc
Dec 31 20:00:22 rc_service: waitting "stop_ntpc" via udhcpc_lan ...
Jan 25 17:51:53 rc_service: ntp 547:notify_rc restart_diskmon
Jan 25 17:51:54 disk monitor: be idle
Jan 26 05:51:53 rc_service: udhcpc_lan 847:notify_rc stop_dnsmasq
Jan 26 05:51:53 rc_service: udhcpc_lan 847:notify_rc start_dnsmasq
Jan 26 17:51:54 rc_service: udhcpc_lan 1139:notify_rc stop_dnsmasq
Jan 26 17:51:54 rc_service: udhcpc_lan 1139:notify_rc start_dnsmasq
Jan 26 17:51:54 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 27 05:51:58 rc_service: udhcpc_lan 1431:notify_rc stop_dnsmasq
Jan 27 05:51:58 rc_service: udhcpc_lan 1431:notify_rc start_dnsmasq
Jan 27 05:51:58 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 27 17:52:02 rc_service: udhcpc_lan 1723:notify_rc stop_dnsmasq
Jan 27 17:52:02 rc_service: udhcpc_lan 1723:notify_rc start_dnsmasq
Jan 28 05:52:03 rc_service: udhcpc_lan 2015:notify_rc stop_dnsmasq
Jan 28 05:52:03 rc_service: udhcpc_lan 2015:notify_rc start_dnsmasq
Jan 28 17:52:04 rc_service: udhcpc_lan 2307:notify_rc stop_dnsmasq
Jan 28 17:52:04 rc_service: udhcpc_lan 2307:notify_rc start_dnsmasq
Jan 29 05:52:05 rc_service: udhcpc_lan 2599:notify_rc stop_dnsmasq
Jan 29 05:52:05 rc_service: udhcpc_lan 2599:notify_rc start_dnsmasq
Jan 29 05:52:05 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 29 17:52:09 rc_service: udhcpc_lan 2891:notify_rc stop_dnsmasq
Jan 29 17:52:09 rc_service: udhcpc_lan 2891:notify_rc start_dnsmasq
Jan 29 17:52:09 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Jan 30 05:52:13 rc_service: udhcpc_lan 3183:notify_rc stop_dnsmasq
Jan 30 05:52:13 rc_service: udhcpc_lan 3183:notify_rc start_dnsmasq
Jan 30 17:52:14 rc_service: udhcpc_lan 3475:notify_rc stop_dnsmasq
Jan 30 17:52:14 rc_service: udhcpc_lan 3475:notify_rc start_dnsmasq
Jan 31 05:52:15 rc_service: udhcpc_lan 3767:notify_rc stop_dnsmasq
Jan 31 05:52:15 rc_service: udhcpc_lan 3767:notify_rc start_dnsmasq
Jan 31 17:52:16 rc_service: udhcpc_lan 4059:notify_rc stop_dnsmasq
Jan 31 17:52:16 rc_service: udhcpc_lan 4059:notify_rc start_dnsmasq
Feb  1 05:52:17 rc_service: udhcpc_lan 4351:notify_rc stop_dnsmasq
Feb  1 05:52:17 rc_service: udhcpc_lan 4351:notify_rc start_dnsmasq
Feb  1 05:52:17 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Feb  1 17:52:21 rc_service: udhcpc_lan 4644:notify_rc stop_dnsmasq
Feb  1 17:52:21 rc_service: udhcpc_lan 4644:notify_rc start_dnsmasq
Feb  1 17:52:21 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Feb  2 05:52:25 rc_service: udhcpc_lan 4936:notify_rc stop_dnsmasq
Feb  2 05:52:25 rc_service: udhcpc_lan 4936:notify_rc start_dnsmasq
Feb  2 17:52:26 rc_service: udhcpc_lan 5228:notify_rc stop_dnsmasq
Feb  2 17:52:26 rc_service: udhcpc_lan 5228:notify_rc start_dnsmasq
Feb  3 05:52:27 rc_service: udhcpc_lan 5520:notify_rc stop_dnsmasq
Feb  3 05:52:27 rc_service: udhcpc_lan 5520:notify_rc start_dnsmasq
Feb  3 17:52:28 rc_service: udhcpc_lan 5812:notify_rc stop_dnsmasq
Feb  3 17:52:28 rc_service: udhcpc_lan 5812:notify_rc start_dnsmasq
Feb  3 17:52:28 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Feb  4 05:52:32 rc_service: udhcpc_lan 6104:notify_rc stop_dnsmasq
Feb  4 05:52:32 rc_service: udhcpc_lan 6104:notify_rc start_dnsmasq
Feb  4 05:52:32 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Feb  4 17:52:36 rc_service: udhcpc_lan 6396:notify_rc stop_dnsmasq
Feb  4 17:52:36 rc_service: udhcpc_lan 6396:notify_rc start_dnsmasq
Feb  5 05:52:37 rc_service: udhcpc_lan 6688:notify_rc stop_dnsmasq
Feb  5 05:52:37 rc_service: udhcpc_lan 6688:notify_rc start_dnsmasq
Feb  5 17:52:38 rc_service: udhcpc_lan 6980:notify_rc stop_dnsmasq
Feb  5 17:52:38 rc_service: udhcpc_lan 6980:notify_rc start_dnsmasq
Feb  5 17:52:38 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Feb  6 05:52:42 rc_service: udhcpc_lan 7272:notify_rc stop_dnsmasq
Feb  6 05:52:42 rc_service: udhcpc_lan 7272:notify_rc start_dnsmasq
Feb  6 05:52:42 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Feb  6 08:56:49 syslogd started: BusyBox v1.17.4
Feb  6 08:56:49 RT-AC56R: start httpd
Feb  6 08:56:49 kernel: klogd started: BusyBox v1.17.4 (2014-01-13 09:58:15 CST)
Feb  6 17:52:46 rc_service: udhcpc_lan 7602:notify_rc stop_dnsmasq
Feb  6 17:52:46 rc_service: udhcpc_lan 7602:notify_rc start_dnsmasq
Feb  6 17:52:46 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Feb  7 05:52:49 rc_service: udhcpc_lan 7894:notify_rc stop_dnsmasq
Feb  7 05:52:49 rc_service: udhcpc_lan 7894:notify_rc start_dnsmasq
Feb  7 05:52:49 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...
Feb  7 17:52:53 rc_service: udhcpc_lan 8186:notify_rc stop_dnsmasq
Feb  7 17:52:53 rc_service: udhcpc_lan 8186:notify_rc start_dnsmasq
Feb  8 05:52:54 rc_service: udhcpc_lan 8478:notify_rc stop_dnsmasq
Feb  8 05:52:54 rc_service: udhcpc_lan 8478:notify_rc start_dnsmasq
Feb  8 05:52:54 rc_service: waitting "stop_dnsmasq" via udhcpc_lan ...

User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

#3

Post by Crash2009 » Tue Feb 10, 2015 3:12 pm

Let's see what happens when I do this.

This one was .149
Attachments
BlockedAndroid.JPG

User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

#4

Post by Crash2009 » Thu Feb 12, 2015 2:29 pm

The results of blocking 149 and closing the switch port that supplies him, was...I got a phone call reporting "No Internet". During the conversation, it was explained that an old Belkin was being used as a WAP/wired switch. He didn't know why the Belkin's IP doesn't show in my routers DHCP list. I suspected the Belkin was using the default IP 192.168.2.XXX, so I switch one of my workstations over to the 2.XXX set and bingo, Belkin magically appears. Wide open (no password), Unlocked, broadcasting SSID requesting a simple PW asdf1234. The Belkin still wouldn't appear in my DHCP list, so I added the IP and MAC manually, and explained to the client that he should connect my internet wire to the WAN port rather than one of the LAN ports.

I have been running Wireshark during the adjustments to Port 16. Not sure what to look for.

arp -a shows Belkin is connected now. However, a new indiscretion has appeared.

I suspect that someone is using something else as a WAP/switch 169.254.2.218 (28-c6-8e-bc-a9-3c) I have noticed 3c and 3d connecting from time to time. MAC search identify's this as a Netgear. I guess I'll block that port and wait for a phone call.
Attachments
28c68e.JPG
BelkinN150_002edited.jpg
28c68e_002edited.jpg
Last edited by Crash2009 on Thu Feb 12, 2015 2:54 pm, edited 1 time in total.

User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

#5

Post by Crash2009 » Thu Feb 12, 2015 2:46 pm

Switching my IP over to 169.254.2.50 with hopes of finding the router, seem to be a dead end. Any ideas on... How do I find the router?
Attachments
169.254.2.218_arpA_edited.jpg

User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

#6

Post by Crash2009 » Fri Feb 13, 2015 3:04 am

Skip that last question. 169's are devices that are unable to get a normal IP from DHCP. release-renew-reboot and they disappear and are replaced with normal IP's.

User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

#7

Post by Crash2009 » Sat Feb 14, 2015 12:38 am

The plot thickens, but I think I an getting somewhere with my most recent angle of attack. I Wiresharked my router's switch port to see everything at the same time.

Found this this morning. I don't know Wireshark very well, but I was thinking that if its marked RED it can't be a good sign. I was having my morning coffee watching the capture and this red kept popping up over and over. 34 is an Android phone that is supposed to connect to a wireless access point with an ip of 97. 34 was also accused originally in the attack against the Belkin IP 80. I blocked 34 in the router and called the kid who owns the phone. He said it had been overheating, same thing mine was doing a month ago. I told him to do a restore and don't install any updates. We will see if that does any good. Restore with no updats has straightened out my phone.

Any body have problems connecting Samsung phones to 2.4 or 5 ghz wifi? or similar problems flooding the network? Looks like Android was working its little heart out trying to connect and get out.
Attachments
34NotReceiving.JPG

User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

#8

Post by Crash2009 » Sat Feb 14, 2015 1:30 am

Is this what I'm seeing in the capture?

SACK_PERM=1

"endless loop of retransmissions of the wrong segment"

https://www.wireshark.org/lists/wiresha ... 00073.html

loop retrains I understand, What is wrong segment?

User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

#9

Post by Crash2009 » Sat Feb 14, 2015 2:55 am

loop Retransmission I understand, What is wrong segment?

The client receives a packet with sequence number greater than expected (seq: 2801, acked: 1), so there is a lost packet possibly. The client signals this by sending the ack with the expected byte (1), but the server keeps sending from sequence 2801, thus the endless loop

http://stackoverflow.com/questions/3918 ... dless-loop

I guess I'll have to translate that into my numbers.

User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

#10

Post by Crash2009 » Sat Feb 14, 2015 4:08 pm

Digging deeper....... 141.211.144.50 is the U of M. Port 993 is used for email.

Maybe I just need to port forward 993 to 192.168.1.34 or the kid needs to do something on the phone?
Attachments
mail.umich.edu.JPG

User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

#11

Post by Crash2009 » Sat Feb 14, 2015 4:42 pm


User avatar
Crash2009

Posts: 4357
Joined: Thu May 17, 2012 12:38 am
Location: Ann Arbor, Michigan

HTPC Specs: Show details

#12

Post by Crash2009 » Tue Feb 17, 2015 4:01 am

Crash2009 wrote:Do something on the Phone....... https://wiki.umms.med.umich.edu/display ... %28IMAP%29
You wont believe this one.....The kid took my little investigative pictures and his phone, straight to the IT Department of the U of M. Of course there is no explanation other than his email account was moved to an Exchange Server----I believe that has something to do with Outlook.

For today, at least, the phone is not overheating anymore, and I'm not seeing RED in Wireshark, well, not as much.

Post Reply