Increasing consistent small packet loss

[davecollins]

I saw the same thing. We have a backup connection and it kept swapping between the two. Fingers crossed...

[Bill]

I take it the new bandwidth went in today?

It's due in today, but BT aren't noted for saying when

[karvala]

Was also down for about 20 minutes or so there, and also have had the weekday afternoon packet loss for months.  Must say I find the timing of it a bit strange; the weekday part certainly implies that it's related to some sort of business use, and we know IDNet are quite business-user heavy these days, but why only the afternoons?  Surely we should see packet loss at 9am in the morning when everyone turns up for work and before anything else, checks their e-mail?

[Gary]

Too early to be sure if the red bits have gone, but I can't see them yet. I'll keep an eye on my BQMs for a while.

Looking on Craigs, Bill there was a huge drop 3:30PM ish. Its on IDNets dedicated server. Seems one other person got it that badly and another but to a lesser extent. An outside event by the looks of it?

[Gary]

It's due in today, but BT aren't noted for saying when

Very True. 

[Simon_idnet]

We just witnessed a large DDoS attack on one of our DSL customers which attracted several GBs of traffic. We are in the process of trying to identify the target.

[Bill]

Had some odd effects here- lost everything a few times, but the router said it was still connected

(Though it did drop once for a minute or two)

Running a 5-second ping to the Beeb for a while so I can see whether it's up or down

[Gary]

Had some odd effects here- lost everything a few times, but the router said it was still connected

(Though it did drop once for a minute or two)

Running a 5-second ping to the Beeb for a while so I can see whether it's up or down

I lost the beeb at the time but it all seems ok again now, although netters keeps loading slowly now and then.

[scook94]

I'm down too, although my router says I'm connected. The default Gateway seems reachable but neither DNS servers are pingable.

[Gary]

Mine started as [Internet disconnected] Tuesday, Feb 18,2014 15:05:33 followed by lots of 'Dos Attack Fin scans' and I lost the net a few more times after that as well.

[zappaDPJ]

I'm down too, although my router says I'm connected. The default Gateway seems reachable but neither DNS servers are pingable.

I'm having the same problem with some, but not all devices. Rebooting doesn't seem to help

[Bill]

I lost the beeb at the time but it all seems ok again now

Seems OK for me at the moment... I think it may have started a while (~an hour?) ago, I noticed that Radio 3 started "sputtering".

[Gary]

[DoS attack: FIN Scan] attack packets in last 20 sec from ip [**.**.**.***], Tuesday, Feb 18,2014 15:10:49 after the initial drop. I have blocked the ip out for obvious reasons.

[Bill]

Can't tell from my router log... the only really bad point about the Asus is its event logging.

[Reya]

Seems to be an uptick in attacks in general. The security plugins on my self-hosted (elsewhere) Wordpress blog have noted a huge increase in hack attempts over the past couple of days, and it's only been a few weeks since the previous mass attempt on WP installations worldwide. The other day one IP address hammered my server with wp-login attempts 9400 times in three hours. I've learned more about the Wordpress backend, security plugins, and .htaccess files in the past few weeks than I ever thought I'd need to know.

[Gary]

Can't tell from my router log... the only really bad point about the Asus is its event logging.

I have the same ip and quite a few disconnects at that time, all point to the same ip whether that was even the real ip who knows, I looked it up and it was US based and seemed to be from Akamai. I really doubt that's the ip of the attacker though.

[Bill]

One thing I've found out- whatever was happening to the Radio 3 stream, iTunes doesn't recover from it, gracefully or otherwise. I had to force-quit every time it lost it

[Gary]

One thing I've found out- whatever was happening to the Radio 3 stream, iTunes doesn't recover from it, gracefully or otherwise. I had to force-quit every time it lost it

I never use iTunes to listen to the radio, on my phone its tune in radio on the Mac I go straight to the BBC page. iTunes does tend to freeze up with the loss of internet though. I was buying an album using it and that happened ages ago.

[Simon_idnet]

We just witnessed a large DDoS attack on one of our DSL customers which attracted several GBs of traffic. We are in the process of trying to identify the target.

Unfortunately the attck stopped before we were able to gather sufficaient data to identify the target. But we have identified the source vector so that if the attack recurs then we will have all the data needed to put a block on it.

[Bill]

I never use iTunes to listen to the radio, on my phone its tune in radio on the Mac I go straight to the BBC page.

I find that if I get Radio 3 direct from the BBC page it has a habit of dropping down from the 320kbps stream to the 48kbps one. Not good. It also saves messing about with Airfoil to redirect the output to the various Airplay speakers around the house- using iTunes means it's all in one place.

iTunes does tend to freeze up with the loss of internet though.

I can confirm that

[Simon]

Unfortunately the attck stopped before we were able to gather sufficaient data to identify the target. But we have identified the source vector so that if the attack recurs then we will have all the data needed to put a block on it.

Thanks for the info, Simon. 

[Technical Ben]

We just witnessed a large DDoS attack on one of our DSL customers which attracted several GBs of traffic. We are in the process of trying to identify the target.

Thanks for the update. Just had 2 disconnects (second required a reboot) and the packet loss spikes are back from being cleared. But FTTC boxes are being installed in this town, so could be local for me. I wonder if it is related? Also heard of some routers getting bot infected recently (http://www.tomshardware.com/news/themoon-worm-linksys-infected-8080,26042.html). I'm not in the know though, so don't listen to my random ramblings.

One thing I've found out- whatever was happening to the Radio 3 stream, iTunes doesn't recover from it, gracefully or otherwise. I had to force-quit every time it lost it

If it helps I had to reload the flash players on my radio 1 page too. OH, but not a hard reset. That's poor form. Though I notice most software does not recover gracefully from a failed connection attempt.

[joe]

No, not what I was hoping for today. We'll have to wait until tomorrow to see if things are better.

[mervl]

Just  a thought: if DSL customers can get DDOS attacks of several Gigs in a few minutes, then that's likely to screw up your data allowance isn't it? 

[Gary]

But FTTC boxes are being installed in this town, so could be local for me.

FTTC being installed should not have an effect on your line at all. I wondered that last year. After asking a man in the know it seems it has no effect. Interesting about those routers though.