Sync speed Has Suddenly Dropped!

I have been synced at 8128 ever since MaxDSL was enabled on my line months ago, but my sync has suddenly dropped to 7808 (Kbps.). I am currently suffering from frequent disconnections from the wireless network and I am showing a number of **Syn Flood To Host** messages and also a *smurf** message. Some of the 'attacks' are inbound and some outbound.

Router security is enabled with WPA2, SSID has been changed, firewall is enabled and my router is set to block ICMP pings. Virus scans and spyware scans are clean.

Any advice please? Could Zen be lowering my sync speed because of all the disconnections? I am only 688 metres from my telephone exchange (as the crow flies!). My speeds have been quite bad at times recently, but seem to have recovered back to normal (for me) this evening.

Date 17/01/07 23:17:19
Speed Down 6194.65 Kbps ( 6 Mbps )
Speed Up 375.69 Kbps ( 0.4 Mbps )



Latest Belkin router security log. The 'TCP Null Scan' should be ignored as I performed the GRC port scan. All ports are showing as stealth.


01/17/2007 23:12:16 192.168.2.3 login success
01/17/2007 22:55:51 192.168.2.3 login success
01/17/2007 22:55:41 User from 192.168.2.3 timed out
01/17/2007 22:02:48 **SYN Flood to Host** 192.168.2.3, 2024->> 64.74.197.36, 80 (from ATM1 Outbound)
01/17/2007 21:57:03 **SYN Flood to Host** 192.168.2.3, 1903->> 64.74.197.36, 80 (from ATM1 Outbound)
01/17/2007 21:40:02 192.168.2.3 login success
01/17/2007 21:39:54 User from 192.168.2.3 timed out
01/17/2007 21:37:45 **TCP Null Scan** 4.79.142.206, 41787->> 217.155.43.89, 0 (from ATM1 Inbound)
01/17/2007 21:17:57 192.168.2.3 login success
01/17/2007 20:51:56 If(ATM1) PPP connection ok !
01/17/2007 20:51:55 ATM1 get IP:xxx.xxx.xxx.xxx
01/17/2007 20:51:54 ATM1 start PPP
01/17/2007 20:51:54 Dial On Demand(ATM1)
01/17/2007 20:51:39 ATM1 get IP:xxx.xxx.xxx.xxx
01/17/2007 20:51:36 If(ATM1) PPP fail : Unknown error or UI Connect/Disconnect
01/17/2007 20:51:34 ATM1 start PPP
01/17/2007 20:51:34 Dial On Demand(ATM1)
01/17/2007 20:51:31 192.168.2.3 login success
01/17/2007 20:51:20 User from 192.168.2.3 timed out
01/17/2007 20:49:07 sending ACK to 192.168.2.3
01/17/2007 20:18:05 NTP Date/Time updated.
01/17/2007 17:48:08 **Smurf** 214.4.83.0, 14893->> xxx.xxx.xxx.xxx, 1026 (from ATM1 Inbound)
01/17/2007 17:33:40 If(ATM1) PPP connection ok !
01/17/2007 17:33:39 ATM1 get IP:xxx.xxx.xxx.xxx
01/17/2007 17:33:38 ATM1 start PPP
01/17/2007 17:33:38 Dial On Demand(ATM1)
01/17/2007 17:33:29 ATM1 get IP:xxx.xxx.xxx.xxx
01/17/2007 17:33:27 If(ATM1) PPP fail : Unknown error or UI Connect/Disconnect
01/17/2007 17:33:25 ATM1 start PPP
01/17/2007 17:33:25 Dial On Demand(ATM1)
01/17/2007 17:33:22 192.168.2.3 login success
01/17/2007 17:33:10 User from 192.168.2.3 timed out
01/17/2007 17:32:12 sending ACK to 192.168.2.3
01/17/2007 17:28:51 ADSL Media Up !
01/17/2007 14:26:20 NTP Date/Time updated.
01/17/2007 14:22:47 If(ATM1) PPP connection ok !
01/17/2007 14:22:46 ATM1 get IP:xxx.xxx.xxx.xxx
01/17/2007 14:22:21 ATM1 start PPP
01/17/2007 14:22:21 Dial On Demand(ATM1)
01/17/2007 14:22:18 192.168.2.3 login success
01/17/2007 14:22:08 User from 192.168.2.3 timed out
01/17/2007 14:21:21 sending ACK to 192.168.2.3
01/17/2007 14:20:11 ADSL Media Up !
01/17/2007 14:05:46 ATM1 stop PPP
01/17/2007 08:11:24 NTP Date/Time updated.
01/17/2007 02:08:05 NTP Date/Time updated.
01/17/2007 01:01:35 **SYN Flood to Host** 192.168.2.3, 1166->> 67.109.144.177, 80 (from ATM1 Outbound)
01/16/2007 20:49:49 sending ACK to 192.168.2.3
01/16/2007 20:04:44 NTP Date/Time updated.
01/16/2007 17:16:00 sending ACK to 192.168.2.3
01/16/2007 14:01:24 NTP Date/Time updated.
01/16/2007 07:58:05 NTP Date/Time updated.
01/16/2007 01:54:45 NTP Date/Time updated.
01/16/2007 00:45:00 sending ACK to 192.168.2.3
01/15/2007 20:43:22 sending ACK to 192.168.2.3
01/15/2007 19:51:25 NTP Date/Time updated.
01/15/2007 18:27:13 192.168.2.3 login success
01/15/2007 18:10:50 **SYN Flood to Host** 192.168.2.3, 3350->> 64.233.183.93, 80 (from ATM1 Outbound)
01/15/2007 15:51:22 sending ACK to 192.168.2.3
01/15/2007 13:48:05 NTP Date/Time updated.
01/15/2007 07:44:46 NTP Date/Time updated.
01/15/2007 01:41:26 NTP Date/Time updated.
01/15/2007 00:38:25 192.168.2.3 logout
01/15/2007 00:33:22 192.168.2.3 login success
01/15/2007 00:33:22 192.168.2.3 login success
01/15/2007 00:33:10 User from 192.168.2.3 timed out
01/14/2007 22:44:22 **SYN Flood to Host** 192.168.2.3, 1815->> 203.84.216.6, 80 (from ATM1 Outbound)
01/14/2007 19:38:06 NTP Date/Time updated.
01/14/2007 16:41:25 sending ACK to 192.168.2.3
01/14/2007 13:34:46 NTP Date/Time updated.
01/14/2007 09:03:36 ADSL Media Up !
01/14/2007 07:31:26 NTP Date/Time updated.
01/14/2007 01:28:06 NTP Date/Time updated.
01/13/2007 20:40:32 sending ACK to 192.168.2.3
01/13/2007 19:24:46 NTP Date/Time updated.
01/13/2007 18:57:33 192.168.2.3 login success
01/13/2007 18:57:22 User from 192.168.2.3 timed out
01/13/2007 17:17:02 sending ACK to 192.168.2.3
01/13/2007 13:21:26 NTP Date/Time updated.
01/13/2007 09:36:45 ADSL Media Up !
01/13/2007 09:35:04 ADSL Media Up !
01/13/2007 09:34:10 ADSL Media Up !
01/13/2007 07:18:06 NTP Date/Time updated.
01/13/2007 01:14:47 NTP Date/Time updated.
01/12/2007 20:44:18 sending ACK to 192.168.2.3
01/12/2007 19:11:26 NTP Date/Time updated.
01/12/2007 16:24:17 sending ACK to 192.168.2.3
01/12/2007 13:08:06 NTP Date/Time updated.
01/12/2007 07:04:47 NTP Date/Time updated.
01/12/2007 01:01:27 NTP Date/Time updated.
01/11/2007 21:16:33 sending ACK to 192.168.2.3
01/11/2007 18:58:07 NTP Date/Time updated.
01/11/2007 12:54:48 NTP Date/Time updated.
01/11/2007 06:51:28 NTP Date/Time updated.
01/11/2007 01:17:43 sending ACK to 192.168.2.3
01/11/2007 00:48:08 NTP Date/Time updated.
01/10/2007 18:44:49 NTP Date/Time updated.
01/10/2007 17:31:55 sending ACK to 192.168.2.3
01/10/2007 12:41:29 NTP Date/Time updated.
01/10/2007 11:26:33 sending ACK to 192.168.2.3
01/10/2007 06:38:09 NTP Date/Time updated.
01/10/2007 00:34:49 NTP Date/Time updated.
01/09/2007 23:46:01 **SYN Flood to Host** 192.168.2.3, 2632->> 72.29.71.215, 80 (from ATM1 Outbound)
01/09/2007 21:10:37 sending ACK to 192.168.2.3
01/09/2007 18:31:29 NTP Date/Time updated.
01/09/2007 17:06:12 NTP Date/Time updated.
01/09/2007 16:59:51 If(ATM1) PPP connection ok !
01/09/2007 16:59:50 ATM1 get IP:xxx.xxx.xxx.xxx
01/09/2007 16:59:46 ATM1 start PPP
01/09/2007 16:59:46 Dial On Demand(ATM1)
01/09/2007 16:59:27 ADSL Media Up !
01/09/2007 16:59:10 If(ATM1) PPP fail : Timeout in LCP negotiation
01/09/2007 16:58:24 ATM1 start PPP
01/09/2007 16:58:24 Dial On Demand(ATM1)
01/09/2007 16:58:19 192.168.2.3 login success
01/09/2007 16:54:42 sending ACK to 192.168.2.3
01/09/2007 09:42:40 ATM1 stop PPP
01/09/2007 06:24:50 NTP Date/Time updated.
01/09/2007 00:33:06 192.168.2.3 logout
01/09/2007 00:31:05 NTP Date/Time updated.
01/09/2007 00:27:32 If(ATM1) PPP connection ok !
01/09/2007 00:27:31 ATM1 get IP:xxx.xxx.xxx.xxx
01/09/2007 00:27:24 ATM1 start PPP
01/09/2007 00:27:24 Dial On Demand(ATM1)
01/09/2007 00:27:16 192.168.2.3 login success
01/09/2007 00:20:20 sending ACK to 192.168.2.3
01/09/2007 00:19:17 ADSL Media Up !
01/09/2007 00:18:57 ATM1 stop PPP
01/09/2007 00:18:43 Can't find NTP time.
01/09/2007 00:18:13 Can't find NTP time.
01/09/2007 00:13:35 sending ACK to 192.168.2.3
01/08/2007 20:38:41 sending ACK to 192.168.2.3
01/08/2007 18:18:10 NTP Date/Time updated.
01/08/2007 15:13:28 sending ACK to 192.168.2.3
01/08/2007 12:40:13 sending ACK to 192.168.2.3
01/08/2007 12:14:50 NTP Date/Time updated.
01/08/2007 06:11:30 NTP Date/Time updated.
01/08/2007 00:08:10 NTP Date/Time updated.
01/07/2007 20:02:41 sending ACK to 192.168.2.3
01/07/2007 18:04:49 NTP Date/Time updated.
01/07/2007 12:01:30 NTP Date/Time updated.
01/07/2007 05:58:10 NTP Date/Time updated.
01/07/2007 03:10:16 sending ACK to 192.168.2.3
01/07/2007 03:07:06 sending ACK to 192.168.2.3
01/06/2007 23:54:50 NTP Date/Time updated.
01/06/2007 21:33:55 sending ACK to 192.168.2.3
01/06/2007 17:51:31 NTP Date/Time updated.
01/06/2007 13:42:42 sending ACK to 192.168.2.3
01/06/2007 11:48:11 NTP Date/Time updated.
01/06/2007 05:44:51 NTP Date/Time updated.
01/06/2007 00:43:41 **SYN Flood to Host** 192.168.2.3, 4237->> 194.112.113.74, 80 (from ATM1 Outbound)
01/06/2007 00:43:20 **SYN Flood to Host** 192.168.2.3, 4223->> 194.112.113.75, 80 (from ATM1 Outbound)
01/05/2007 23:41:31 NTP Date/Time updated.
01/05/2007 23:17:47 **SYN Flood to Host** 192.168.2.3, 3168->> 213.174.201.248, 80 (from ATM1 Outbound)
01/05/2007 20:15:50 sending ACK to 192.168.2.3
01/05/2007 17:38:42 NTP Date/Time updated.
08/01/2003 00:00:41 If(ATM1) PPP connection ok !
08/01/2003 00:00:40 ATM1 get IP:xxx.xxx.xxx.xxx
08/01/2003 00:00:29 ATM1 start PPP
08/01/2003 00:00:29 ADSL Media Up !

**EDIT** Upstream attenuation is higher than downstream!


Noise Margin
24 dB up
10 dB down

Attenuation
20 dB up
19 dB down

Edited by deleted (Wed 17-Jan-07 23:25:42)

Have you been running a P2P (torrent) program ? Some of these can cause spurious traffic in and out, as residual connections are re-attempted.

Hi, no I haven't got any P2P programs installed.

Just to let you know that I'm syncing again at 8128. I've relocated the wireless router down to the other side of the room nearer to the BT socket and am using the phone cable which originally came with it, instead of an extra-long cable I was using (bought online). All seems okay at the moment, so fingers crossed the long cable was to blame! The RJ45 connector plug had become a bit loose recently.

Attenuation is still 20 down/20 up, but I think it's the Belkin router to 'blame'.

I'd still be rather suspicious about all this traffic which appears to leave your PC as soon as a connection is established. Do you have a good security program and virus checker installed ?

Hi again, I have Eset Nod32 anti-virus, AVG anti-spyware, Spywareblaster, and Winpatrol all running in the background. I'm using Windows Firewall and the built-in firewall in my router. I've been wondering whether to install ZoneAlarm to keep an eye on outbound traffic.

Just checked the log and my sync speed has dipped sharply again.

Up Stream
448 (Kbps.)

Down Stream
6976 (Kbps.)


Fast Path FEC Correction
1632
0

Interleaved Path FEC Correction
0
0

Fast Path CRC Error
40
1117

Interleaved Path CRC Error
0
0

Loss of Signal Defect
0
---

Fast Path HEC Error
0
0

Interleaved Path HEC Error
0
0


No more DOS attacks recorded as yet.

Edited by deleted (Thu 18-Jan-07 18:24:46)

had a big drop today aswel

probably due to the weather?

zen?

It could be. We've had torrential rain and storm force winds round here. Thankfully the electricity didn't go down, about 40,000 homes up here have no electricity at the moment.

connection been solid at 7616/832 9db sync for the last 2 months +

7pm tonite lost sync, resynced at 68**/832 14db

then was ok for an hour.. then at 8pm lost sync completely and was up/down every 10seconds for an hour..

back on now but at a crappy 6816/832 13db

My attenuation used to be 20 down/9.5 up, but is now showing as 20 down/20 up. Is this a cause for concern? I've been googling but can find very little about the subject.