What's new

System log question

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

eastavin

Senior Member
What is this home RT-AC68u router trying to tell me? System log file seems to have maybe thousands of these lines at times the last few days 380.69_2 . The time stamp for what it is worth seems to coincide with the owners son getting home from school and firing up his tower of power loaded with Steam games and other stuff. (but not always). Thank you for any advice anyone can offer.

Feb 8 15:22:54 kernel: net_ratelimit: 452 callbacks suppressed
Feb 8 15:22:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:22:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:22:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:22:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:22:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:22:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:22:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:22:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:22:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:22:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:23:04 kernel: net_ratelimit: 248 callbacks suppressed
Feb 8 15:23:04 kernel: TCP: time wait bucket table overflow
Feb 8 15:23:04 kernel: TCP: time wait bucket table overflow
Feb 8 15:23:04 kernel: TCP: time wait bucket table overflow
Feb 8 15:23:04 kernel: TCP: time wait bucket table overflow
Feb 8 15:23:04 kernel: TCP: time wait bucket table overflow
Feb 8 15:23:04 kernel: TCP: time wait bucket table overflow
Feb 8 15:23:04 kernel: TCP: time wait bucket table overflow

Feb 8 15:24:39 kernel: net_ratelimit: 408 callbacks suppressed
Feb 8 15:24:39 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:39 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:39 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:39 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:39 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:39 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:39 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:39 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:39 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:39 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:49 kernel: net_ratelimit: 238 callbacks suppressed
Feb 8 15:24:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:54 kernel: net_ratelimit: 428 callbacks suppressed
Feb 8 15:24:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:24:54 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:02 kernel: net_ratelimit: 244 callbacks suppressed
Feb 8 15:25:02 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:02 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:02 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:02 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:02 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:02 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:02 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:02 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:02 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:02 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:07 kernel: net_ratelimit: 448 callbacks suppressed
Feb 8 15:25:07 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:07 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:07 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:07 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:07 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:07 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:07 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:07 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:07 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:07 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:19 kernel: net_ratelimit: 343 callbacks suppressed
Feb 8 15:25:19 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:19 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:19 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:19 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:19 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:19 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:19 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:19 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:19 kernel: TCP: time wait bucket table overflow

Feb 8 15:25:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:49 kernel: TCP: time wait bucket table overflow
Feb 8 15:25:54 kernel: net_ratelimit: 440 callbacks suppressed
 
It’s just a load of old sockets getting binned.
Steam/online games often use a lot of connections, as do torrent downloads.
All this is are sockets which have been closed but are hanging around just in case they get re-used getting forcibly closed as there are so many of them the router has run out of space to track them.


Sent from my iPhone using Tapatalk
 
It’s just a load of old sockets getting binned.
Steam/online games often use a lot of connections, as do torrent downloads.
All this is are sockets which have been closed but are hanging around just in case they get re-used getting forcibly closed as there are so many of them the router has run out of space to track them.


Sent from my iPhone using Tapatalk

Not THAT many connections.
The default config is pretty high.

He is either getting DDOS or part of a botnet.

The tower of power need a health visit, and needs to wear a condom going forward.
My bet is a sketchy "game hack/exploit" infected him
 
Not THAT many connections.
The default config is pretty high.

He is either getting DDOS or part of a botnet.

Depends what ‘owners son’ is up too!!


Sent from my iPhone using Tapatalk
 
Thanks.

Something is blocking updates on his Windows 10 gaming machine once it got to Ver 1709 in December so its elevated my interest. Thinking it may be time to take advantage of Windows Fresh Start and redo the PC. 2 hours of investigation has not solved the problem so it may be best to blow it away.
 
Couple of similar threads here
https://www.snbforums.com/threads/time-wait-bucket-overflow.29745/
https://www.snbforums.com/threads/possible-issue.18244/

My money is that ‘someone’ is torrenting stuff.


Sent from my iPhone using Tapatalk

that i can investigate.

the second thread you have here is interesting though as the guy claims he did not see it until updating his firmware and when he goes back it vanishes. Kind of my case. never seen it before for whatever reason until getting on this one.
 
Network Tools - Netstat - Netstat-nat - by source IP

Unless he set his peer limit to infinity, I don't know how he is maxing the table. It's pretty big compared to older routers.
 
Network Tools - Netstat - Netstat-nat - by source IP

Unless he set his peer limit to infinity, I don't know how he is maxing the table. It's pretty big compared to older routers.

So I use this to see which device on the Lan has the most natted connections? would this be a way to short list possibilities?
 

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top