Losing internet everyday, twice a day



  • For the past month or so I have started losing my internet connection.  It happens everyday around 9-9:30am and then again around 10-10:30pm.  After about 5 minutes it comes back again.

    I had an old PC so I decided to use it for pfSense at home.  Just to learn how it works and play around with it.  So obviously this isn't a critical situation but annoying nonetheless.  My internet provider is Time Warner Cable and I have the Ubee cable modem.

    Below are the entries in the general log file section.  I'm not sure if anything can be taken away from this entries but they are what appear everytime the internet goes down.

    Sep 3 22:33:13 check_reload_status: updating dyndns WAN_DHCP
    Sep 3 22:33:13 check_reload_status: Restarting ipsec tunnels
    Sep 3 22:33:13 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Sep 3 22:33:13 check_reload_status: Reloading filter
    Sep 3 22:33:19 check_reload_status: updating dyndns WAN_DHCP
    Sep 3 22:33:19 check_reload_status: Restarting ipsec tunnels
    Sep 3 22:33:19 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Sep 3 22:33:19 check_reload_status: Reloading filter
    Sep 3 22:38:34 check_reload_status: updating dyndns WAN_DHCP
    Sep 3 22:38:34 check_reload_status: Restarting ipsec tunnels
    Sep 3 22:38:34 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Sep 3 22:38:34 check_reload_status: Reloading filter
    Sep 3 22:38:44 check_reload_status: updating dyndns WAN_DHCP
    Sep 3 22:38:44 check_reload_status: Restarting ipsec tunnels
    Sep 3 22:38:44 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Sep 3 22:38:44 check_reload_status: Reloading filter

    These are the entries from the gateway log.  This appears to be saying that my cable modem has gone down?  I have checked the lights on the cable modem box and they don't indicate that it is down.  So I'm kind of confused about this one.

    Sep 3 22:33:03 apinger: ALARM: WAN_DHCP(192.168.0.1) *** down ***
    Sep 3 22:33:09 apinger: alarm canceled: WAN_DHCP(192.168.0.1) *** down ***
    Sep 3 22:38:24 apinger: ALARM: WAN_DHCP(192.168.0.1) *** delay ***
    Sep 3 22:38:34 apinger: alarm canceled: WAN_DHCP(192.168.0.1) *** delay ***

    At the same time in the firewall log I start getting entries like this (192.168.0.1 is the Ubee)

    Sep 4 09:36:45 WAN 192.168.0.1 224.0.0.1 IGMP
    Sep 4 09:36:45 WAN 192.168.0.1 224.0.0.1 IGMP
    (I can ping the addresses below but I have no idea what they are)
    Sep 4 09:36:45 WAN 192.168.26.1 224.0.0.1 IGMP
    Sep 4 09:36:45 WAN 192.168.27.1 224.0.0.1 IGMP
    Sep 4 09:36:45 WAN 192.168.28.1 224.0.0.1 IGMP

    I am just a beginner with all of this stuff so any help would be greatly appreciated.

    Sean



  • You should try logging into your cable modem and checking its logs for errors.



  • @Harvy66:

    You should try logging into your cable modem and checking its logs for errors.

    I wish I could.  Unfortunately Time Warner locks out the WebUI.  I tried all the default username/password combos I could find on the internet and none of them worked.



  • Maybe you can get your own, but have a look round for those that might have zero days like this one.

    http://www.theregister.co.uk/2015/09/02/sohopeless_belkin_router_redirection_zero_day/
    "Belkin was notified of the vulnerabilities in its latest firmware and likely those earlier but has not released a fix. There is also no mitigations nor practical fixes "as general users are unlikely to be able to monitor traffic entering the router's WAN port".

    Nothing like calling your users dumb.



  • What model router do you have from your ISP?

    This link is invaluable for cable internet users.

    http://homepage.ntlworld.com/robin.d.h.walker/docsdiag/



  • Similar thing happened to me - kept dropping the internet at 0230 every night. Turned out to be a monitored security alarm which "grabbed" the copper phone line every morning at that time so it could check the line. check to see someone or something isn't messing with your phone line, as the logs you have seem to indicated something similar.



  • @sos:

    Similar thing happened to me - kept dropping the internet at 0230 every night. Turned out to be a monitored security alarm which "grabbed" the copper phone line every morning at that time so it could check the line. check to see someone or something isn't messing with your phone line, as the logs you have seem to indicated something similar.

    I have a cable modem (Ubee DDW3611), so no phone lines and no security system.

    @tim.mcmanus:

    What model router do you have from your ISP?

    This link is invaluable for cable internet users.

    http://homepage.ntlworld.com/robin.d.h.walker/docsdiag/

    Time Warner locks the modem down so I can't do anything mentioned on that website.  Thanks though



  • @talon4x4:

    @sos:

    Similar thing happened to me - kept dropping the internet at 0230 every night. Turned out to be a monitored security alarm which "grabbed" the copper phone line every morning at that time so it could check the line. check to see someone or something isn't messing with your phone line, as the logs you have seem to indicated something similar.

    I have a cable modem (Ubee DDW3611), so no phone lines and no security system.

    @tim.mcmanus:

    What model router do you have from your ISP?

    This link is invaluable for cable internet users.

    http://homepage.ntlworld.com/robin.d.h.walker/docsdiag/

    Time Warner locks the modem down so I can't do anything mentioned on that website.  Thanks though

    Did you try any of it?  Most modems will respond to an SNMP query, and that's what this is doing.