Reply

HG659 and ARP storm

Contributor
Posts: 135
Registered: ‎25-01-2012
Accepted Solution

HG659 and ARP storm

[ Edited ]
by Contributor zerkms Contributor
Message 1 of 5 (1,129 Views)

Hi,

 

sometimes the HG659 goes mad and starts storming my home network with arp requests:

 

21:58:10.562870 ARP, Request who-has 192.168.1.7 tell 192.168.1.111, length 46
21:58:10.568433 ARP, Request who-has 192.168.1.4 tell 192.168.1.111, length 46
21:58:10.575742 ARP, Request who-has 192.168.1.3 tell 192.168.1.111, length 46
21:58:10.581878 ARP, Request who-has 192.168.1.6 tell 192.168.1.111, length 46
21:58:10.614877 ARP, Request who-has 192.168.1.7 tell 192.168.1.111, length 46
21:58:10.620653 ARP, Request who-has 192.168.1.4 tell 192.168.1.111, length 46
21:58:10.624076 ARP, Request who-has 192.168.1.3 tell 192.168.1.111, length 46
21:58:10.630434 ARP, Request who-has 192.168.1.6 tell 192.168.1.111, length 46
21:58:10.703030 ARP, Request who-has 192.168.1.7 tell 192.168.1.111, length 46
21:58:10.708262 ARP, Request who-has 192.168.1.4 tell 192.168.1.111, length 46
21:58:10.714015 ARP, Request who-has 192.168.1.3 tell 192.168.1.111, length 46
21:58:10.720151 ARP, Request who-has 192.168.1.6 tell 192.168.1.111, length 46

 

It creates ~3KB/s constant load.

 

It annoys.

 

Reboot helps, but I'm curious has anyone else experienced that as well? Or may be there is even a firmware upgrade that fixes it?

 

Thanks

 

PS: at this very moment some of those 4 addresses are in the network and send the corresponding arp-replies.

Contributor
Posts: 142
Registered: ‎15-09-2016

Re: HG659 and ARP storm

by Contributor MrMorm Contributor
Message 2 of 5 (1,039 Views)

latest firmware here if you want

http://help.vodafone.co.nz/app/answers/detail/a_id/24400/

It doesn't fix that bug though. The Arps stop after a while, so not a big impact.

 

Starter Poster
Posts: 2
Registered: ‎08-12-2017

Re: HG659 and ARP storm

by chris_burns Starter Poster
Message 3 of 5 (1,225 Views)

I have the same problem & did some troubleshooting...

 

Turning OFF the following setting definitely seemed to fix it for me:

 

Internet

  Network Security

    Firewall

      Enable ARP attack protecting

 

 

Wireshark shows a huge difference before / after..

 

Product type: HG659
Device ID: 00E0FC-J3NEQ15905001401
Hardware version: VER.B
Software version: V100R001C206B020
System up time: 0 days 0 hours 15 minutes 34 seconds
 
 
ChrisB
chris-burns@yahoo.com
021 391-286
Contributor
Posts: 135
Registered: ‎25-01-2012

Re: HG659 and ARP storm

by Contributor zerkms Contributor
Message 4 of 5 (821 Views)

Oh, wow. Thanks :-)

Highlighted
Starter Poster
Posts: 2
Registered: ‎08-12-2017

Re: HG659 and ARP storm

by chris_burns Starter Poster
Message 5 of 5 (797 Views)

Hmm, the disabling of "Enable ARP attack protecting" looks to be ineffective for me. After some time (< a day), the excessive ARP/storm is back.

 

That would make sense, as that setting is supposedly on the WAN interface & I see the ARP traffic coming from my HG659 on the LAN side...

 

Rebooting seems to fix the problem for some time, but it looks like getting another router may be the only solution...

 

ChrisB

Stats
  • 4 Replies
  • 44w ago
  • 1,130 Views
  • 3 Kudos
  • 3 Contributors