Could anyone help me what is happenoing with my router please?

FrantaBrabec2017

Could you check and confirm logs from my Zyxel VMG1312B30B are ok please?

2017 -10 -17 T17:17:51	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T17:17:52	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= MAC= SRC=103.217.111.222 DST=10.242.153.246 126
2017 -10 -17 T17:17:54	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T17:17:54	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T17:18:00	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T17:27:58	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= MAC= 86
2017 -10 -17 T17:37:53	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T17:47:53	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T17:55:41	daemon	notice	syslog: Receive DHCP REQUEST from 6C:27:79:78:13:70 98
2017 -10 -17 T17:55:42	daemon	notice	syslog: Send DHCP ACK to 6C:27:79:78:13:70 with IP 10.0.0.3 106
2017 -10 -17 T17:55:42	daemon	notice	syslog: DHCP server assigns 10.0.0.3 83
2017 -10 -17 T17:55:59	daemon	notice	syslog: Receive DHCP REQUEST from 6C:27:79:78:13:70 98
2017 -10 -17 T17:55:59	daemon	notice	syslog: Send DHCP ACK to 6C:27:79:78:13:70 with IP 10.0.0.3 106
2017 -10 -17 T17:55:59	daemon	notice	syslog: DHCP server assigns 10.0.0.3 83
2017 -10 -17 T17:58:01	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T18:07:52	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T18:17:51	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T18:27:50	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T18:37:50	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T18:47:51	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T18:57:54	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T19:07:51	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T19:17:53	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T19:27:51	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T19:37:52	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T19:47:51	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T19:57:52	daemon	alert	kernel: Intrusion -> IN=ppp1.1 OUT= 82
2017 -10 -17 T20:02:37	daemon	crit	kernel: eth0 Link UP 100 mbps full duplex 86
2017 -10 -17 T20:02:41	daemon	notice	syslog: Receive DHCP DISCOVER from 00:21:CC:CD:15:F5 99
2017 -10 -17 T20:02:43	daemon	notice	syslog: Send DHCP OFFER to 00:21:CC:CD:15:F5 with IP 10.0.0.4 108
2017 -10 -17 T20:02:45	daemon	notice	syslog: Receive DHCP DISCOVER from 00:21:CC:CD:15:F5 99
2017 -10 -17 T20:02:45	daemon	notice	syslog: Send DHCP OFFER to 00:21:CC:CD:15:F5 with IP 10.0.0.4 108
2017 -10 -17 T20:02:54	daemon	notice	syslog: Receive DHCP DISCOVER from 00:21:CC:CD:15:F5 99
2017 -10 -17 T20:02:54	daemon	notice	syslog: Send DHCP OFFER to 00:21:CC:CD:15:F5 with IP 10.0.0.4 108
2017 -10 -17 T20:02:54	daemon	notice	syslog: Receive DHCP REQUEST from 00:21:CC:CD:15:F5 98
2017 -10 -17 T20:02:54	daemon	notice	syslog: Send DHCP ACK to 00:21:CC:CD:15:F5 with IP 10.0.0.4 106
2017 -10 -17 T20:02:55	daemon	notice	syslog: DHCP server assigns 10.0.0.4 83
2017 -10 -17 T20:05:23	daemon	warn	radvd[6422]: sendmsg: Invalid argument 83
2017 -10 -17 T20:05:23	daemon	warn	radvd[6422]: Exiting, sigterm or sigint received. 94
2017 -10 -17 T20:05:23	daemon	warn	radvd[28082]: sendmsg: Invalid argument 84
2017 -10 -17 T20:05:25	daemon	warn	radvd[28082]: sendmsg: Invalid argument 84
2017 -10 -17 T20:05:25	daemon	warn	radvd[28082]: Exiting, sigterm or sigint received. 95
2017 -10 -17 T20:05:25	daemon	warn	radvd[28181]: sendmsg: Invalid argument 84
2017 -10 -17 T20:05:27	daemon	warn	radvd[28181]: sendmsg: Invalid argument 84
2017 -10 -17 T20:05:27	daemon	warn	radvd[28181]: Exiting, sigterm or sigint received. 95
2017 -10 -17 T20:05:27	daemon	warn	radvd[28305]: sendmsg: Invalid argument 84

Thank you very much



#CPE_October

Rory

@FrantaBrabec2017

What's the complete firmware version?

Do you encounter any problem with VMG1312B30B when the log display?

Ansa

Hi FrantaBrabec,
Are you using IPv6 in your network?
It looks like radvd which is using for ipv6 has some error, however, the logs don't shown too much about it.
If your IPv4 networking is working properly.
Maybe you could disable IPv6.
Otherwise, it would be good that you can also share the firmware version you used.