Unexplained outages and packet loss

Posting this under its own thread with updates.

I had an unexplained 8 hour outage and morning outages over several days last week which prompted me to start inspecting my uptimes and packet loss. See https://secure.dslreports.com/r3/smokeping.cgi?target=network.1bc86f75dc1ddfd6b583ac439d748c53.CA1 and https://secure.dslreports.com/r3/smokeping.cgi?target=network.1bc86f75dc1ddfd6b583ac439d748c53.KS. The only packet loss to ignore is around 2PM on 12/03/12 as that was the Comcast tech wasting time disconnecting the line just to say everything was "working great". On Sunday (12/02/12) you'll notice a near-constant 5%-10% packet loss. The connection completely dropped out several times today. For the past 3 hours it's reporting 5.50% average (max 94.4%) packet loss to the east coast server and 2.94%average (max 89.5%) packet loss to the west coast server.

Could I also have the cusadmin password reset on the SMC gateway so that I can view the signal information?

Responses

Accepted Solution

opensrcsec

Visitor

•

5 Messages

12 years ago

Hi John,

Access does seem to be restricted to the "WAN Internet" IP address, but the interface is still accessible to the public at the "WAN DHCP" IP address, it's a 76.100.X.X address.

Thanks

0

CC_John

Retired Employee

•

1.9K Messages

12 years ago

Welcome opensrcsec. I have referred your issue to the local service center in your area for a service call. Also the gateway password has been reset to the default.

Thank you

0

opensrcsec

Visitor

•

5 Messages

12 years ago

Hi John,

A much more knowledgeable tech showed up today and seems to have resolved the issue so far! I'll keep doing some tests though to make sure it's fixed.

Do you know how to disable remote access to the login interface of the SMC router? Especially since it seems the password is changed/reset from time to time from what I had it set to, I don't want these events to impact security as it seems the interface can be accessed via two different IP addresses (the WAN DHCP IP address and the WAN Internet IP address). Ideally these should only be allowed to be reached by authorized Comcast employees and from my own systems behind the router, as I can only firewall on my end access from systems behind the SMC router to the router.

Thanks for your help!

0

CC_John

Retired Employee

•

1.9K Messages

12 years ago

opensrcsec, Remote access to gateway has been restricted to internal Comcast test center IP addresses. The LAN side password was not reset. Let us know if we can further assist.

Thank You

0

opensrcsec

Visitor

•

5 Messages

12 years ago

To update, I've checked the packet loss statistics from last night and unfortunately it seems the problem isn't solved (I just got lucky for a few hours I guess). I've started another smokeping test against the SMC gateway itself to correlate the information and will update once that's run for a day or so.

0

pflog

New problem solver

•

21 Messages

12 years ago

While I am not a Comcast employee, I can confirm that I can connect neither to the "WAN DHCP IP Address" nor to the "WAN Internet IP Address" on ports 80 and 443. So I think you're safe in that regard. 🙂

0