Frequent Internet Disconnects

[TheJam]

Hi guys,

I've been having an issue over the past couple of weeks where I'm getting kicked out of party chat on xbox and in-game. It's happening on a frequent basis now where I'll get kicked once every hour, sometimes several times an hour.

I can see the disconnects in the logs:

[Internet connected] IP address: XX.XXX.XX.XX, Thursday, Apr 29,2021 23:04:34
[Internet disconnected] Thursday, Apr 29,2021 23:04:23
[Internet idle-timeout] Thursday, Apr 29,2021 23:04:23

 

Any idea why this might be happening? Any help would be appreciated

 

 

 

[Valvaris]

Hello @TheJam

how are you connected to the Internet / ISP?

PC ----> Router XR ----> Modem ----> ISP 
OR
PC ----> Router XR PPPOE ---> ISP

Cable / DSL / ADSL / VDSL 

I ask this because it could also be a ISP related issue with DHCP Addressing or other Service Outages.

Best regards
Val. 

[TheJam]

Cheers @Valvaris

I'm connected PC --> Router XR --> Modem --> ISP.

Gfast connection with BT.

 

I checked BT's website and can't see any outages or issues reported but might need to give them a call

[Netduma Liam]

57 minutes ago, TheJam said:

Cheers @Valvaris

I'm connected PC --> Router XR --> Modem --> ISP.

Gfast connection with BT.

 

I checked BT's website and can't see any outages or issues reported but might need to give them a call

Do you currently have Hybrid VPN enabled? If so, could you please disconnect and see if you're still getting the same issue?

[TheJam]

1 hour ago, Netduma Liam said:

Do you currently have Hybrid VPN enabled? If so, could you please disconnect and see if you're still getting the same issue?

Hi @Netduma Liam, I don't have hybrid VPN enabled. Cheers

[Netduma Fraser]

Is it the BT Hub you're using or a pure modem (no WiFi)?

[TheJam]

@Netduma Fraser Using an OpenReach Gfast modem - think it’s a Huawei. No WiFi - locked off as well unfortunately 

[Newfie]

Under your internet settings make sure the connection is set to always on or else the router sleeps. By rights it should only happen when the network is quiet but worth a check.

[Netduma Fraser]

Good advice above, let us know how you get on

[TheJam]

@Newfie @Netduma Fraser Cheers guys. Could it potentially be a bug in the code causing it to timeout when the internet is in use? It happens gaming online for some reason 

[Netduma Fraser]

If that fixes it then it could be incorrectly detecting a timeout yes, if it stops happening then we can let NG know

[TheJam]

@Netduma Fraser Set my connection to 'Always On'. Ended up with another internet disconnect while playing online. It ended up crashing my entire game and kicked me out into the xbox dashboard without any internet. Before, it would just disconnect for a second and reconnect.

Any idea's what could be happening?

[Netduma Fraser]

Can you look at the logs when it happens again please and post what is says? It may say something different from before

[TheJam]

DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 01:05:44
[UPnP set event: Public_UPNP_C3] from source XXX.XXX.X.XXX, Sunday, May 02,2021 01:05:38
[UPnP set event: Public_UPNP_C3] from source XXX.XXX.X.XXX, Sunday, May 02,2021 01:05:36
[Admin login] from source XXX.XXX.X.XX, Sunday, May 02,2021 01:05:36
[DHCP IP: (XXX.XXX.X.X)] to MAC address XX:XX:XX:XX:XX:XX, Sunday, May 02,2021 01:05:27
[Time synchronized with NTP server] Sunday, May 02,2021 01:05:26
[Internet connected] IP address: XX.XXX.XX.XXX, Sunday, May 02,2021 01:05:20
[UPnP set event: Public_UPNP_C3] from source XXX.XXX.X.XXX, Sunday, May 02,2021 01:04:34
[UPnP set event: Public_UPNP_C3] from source XXX.XXX.X.XXX, Sunday, May 02,2021 01:04:28
[Internet disconnected] Sunday, May 02,2021 01:03:46
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 01:02:19
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 01:00:14
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:58:09
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:56:04
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:53:59
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:51:54
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:49:49
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:47:44
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:45:39
[DoS attack: RST Scan] from source XX.XXX.XXX.XXX,port XXX Sunday, May 02,2021 00:45:00
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:43:34
[DHCP IP: (XXX.XXX.X.XX)] to MAC address XX:XX:XX:XX:XX:XX, Sunday, May 02,2021 00:41:55
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:41:29
[UPnP set event: Public_UPNP_C3] from source XXX.XXX.X.XXX, Sunday, May 02,2021 00:39:51
[DHCP IP: (XXX.XXX.X.XX)] to MAC address XX:XX:XX:XX:XX:XX, Sunday, May 02,2021 00:39:39
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:39:24
[DHCP IP: (XXX.XXX.X.XXX)] to MAC address XX:XX:XX:XX:XX:XX, Sunday, May 02,2021 00:39:06
[DHCP IP: (XXX.XXX.X.X)] to MAC address XX:XX:XX:XX:XX:XX, Sunday, May 02,2021 00:38:38
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:37:19
[DHCP IP: (XXX.XXX.X.XX)] to MAC address XX:XX:XX:XX:XX:XX, Sunday, May 02,2021 00:36:36
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:35:14
[DHCP IP: (XXX.XXX.X.XX)] to MAC address XX:XX:XX:XX:XX:XX, Sunday, May 02,2021 00:33:33
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:33:09
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:31:04
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:28:59
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:26:54
[DHCP IP: (XXX.XXX.X.XX)] to MAC address XX:XX:XX:XX:XX:XX, Sunday, May 02,2021 00:26:12
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:24:49
[DHCP IP: (XXX.XXX.X.XX)] to MAC address XX:XX:XX:XX:XX:XX, Sunday, May 02,2021 00:22:44
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:22:44
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:20:39
[DHCP IP: (XXX.XXX.X.XX)] to MAC address XX:XX:XX:XX:XX:XX, Sunday, May 02,2021 00:19:11
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:18:34
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:16:29
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:14:24
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:12:19
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:10:14
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:08:09
[DHCP IP: (XXX.XXX.X.XX)] to MAC address XX:XX:XX:XX:XX:XX, Sunday, May 02,2021 00:07:53
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:06:04
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:03:59
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Sunday, May 02,2021 00:01:54
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:59:49
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:57:44
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:55:39
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:53:34
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:51:29
[DoS attack: ACK Scan] from source XXX.XX.XXX.XXX,port XXX Saturday, May 01,2021 23:49:54
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:49:24
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:47:19
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:45:14
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:43:09
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:41:04
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:38:59
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:36:54
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:34:49
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:32:44
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:30:39
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:28:34
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:26:29
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:24:24
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:22:19
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:20:14
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:18:09
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:16:04
[DHCP IP: (XXX.XXX.X.XX)] to MAC address XX:XX:XX:XX:XX:XX, Saturday, May 01,2021 23:15:32
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:13:59
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:11:54
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:09:49
[DoS attack: snmpQueryDrop] from source  XX.XXX.XXX.XXX,port XXX Saturday, May 01,2021 23:09:34
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:07:44
[DoS attack: ACK Scan] from source XXX.XX.XXX.XX,port XXX Saturday, May 01,2021 23:07:10
[DoS attack: Fraggle Attack] from source UNKNOWN,port XXX Saturday, May 01,2021 23:05:39

 @Netduma Fraser I saved the logs when the disconnect happened. Took a snippet from before the disconnect. Just edited out the IP's and port numbers. The rest of the logs is pretty much just repeating from what's under the disconnect.

 

Might be worth adding that the times are an hour behind of what was happening. Guess it just doesn't take daylight savings into account.

[Netduma Fraser]

What are the ports where the fraggle attacks are coming in from?

[TheJam]

4 hours ago, Netduma Fraser said:

What are the ports where the fraggle attacks are coming in from?

They're all coming from port 443

[Netduma Fraser]

Have you opened any ports or using the DMZ at all?

[TheJam]

7 minutes ago, Netduma Fraser said:

Have you opened any ports or using the DMZ at all?

I use UPnP and set my NAT to Open. Other than that, there’s no DMZ or port rules set up

[Netduma Fraser]

Can you put NAT to secure instead please, just want to see if those entries stop and if it has any effect on the disconnects

[TheJam]

On 5/2/2021 at 9:58 PM, Netduma Fraser said:

Can you put NAT to secure instead please, just want to see if those entries stop and if it has any effect on the disconnects

I wanted to test over a few days just to make sure but there's not been any internet disconnects since changing the NAT type to Secure. However, since the disconnects, my brother and I keep losing connection to each other playing Elite Dangerous when that never happened before (playing in the same household, both on xbox). This hasn't stopped since switching to Secured NAT - not sure why that's developed since these disconnects started happening.

[Netduma Fraser]

1 hour ago, TheJam said:

I wanted to test over a few days just to make sure but there's not been any internet disconnects since changing the NAT type to Secure. However, since the disconnects, my brother and I keep losing connection to each other playing Elite Dangerous when that never happened before (playing in the same household, both on xbox). This hasn't stopped since switching to Secured NAT - not sure why that's developed since these disconnects started happening.

I assume this is without using the Geo-Filter? Could you try disabling QoS completely and see whether that keeps you connected please?

Great to hear about the disconnects!

[TheJam]

On 5/7/2021 at 3:18 PM, Netduma Fraser said:

I assume this is without using the Geo-Filter? Could you try disabling QoS completely and see whether that keeps you connected please?

Great to hear about the disconnects!

Geo-Filter is off. I had QoS on, retried with it off and still seems to just disconnect us after about an hour or two of being in the same session. Quitting the game and restarting fixes it but just happens again after an hour or two of playing.

[Netduma Fraser]

Can you check the log file for any entries around the time you get disconnected please?

[TheJam]

On 5/15/2021 at 12:59 PM, Netduma Fraser said:

Can you check the log file for any entries around the time you get disconnected please?

Apologies for the delays with getting back to you. I've not had time to get back into gaming again to grab the logs. I decided to set up an email schedule to send me the logs on a daily basis, just so I have them if I need to refer to them.

However, I have a bit of a weird issue. I have a Netgear Orbi (set in AP mode) and the XR1000, I've set up the same imap outgoing server and authentication details for both. The Orbi sends me the logs fine but the XR1000 only sends me the first 3 characters of the log on the XR router. Unrelated to the original issue so happy to set up a new thread if that helps but not sure if there's a quick fix for that one? I've tried sending the logs about half a dozen times and same behaviour each time.

[Netduma Liam]

10 minutes ago, TheJam said:

Apologies for the delays with getting back to you. I've not had time to get back into gaming again to grab the logs. I decided to set up an email schedule to send me the logs on a daily basis, just so I have them if I need to refer to them.

However, I have a bit of a weird issue. I have a Netgear Orbi (set in AP mode) and the XR1000, I've set up the same imap outgoing server and authentication details for both. The Orbi sends me the logs fine but the XR1000 only sends me the first 3 characters of the log on the XR router. Unrelated to the original issue so happy to set up a new thread if that helps but not sure if there's a quick fix for that one? I've tried sending the logs about half a dozen times and same behaviour each time.

Thanks for the update!

That's interesting, that will be an issue with NG settings but we'll do our best to assist nonetheless. Could you provide a screenshot of how it's configured so far with any important information blanked/removed?