Anyone else notice a recent change in logging on their ActionTec? (Router: Firmware MI424WR-GEN3I / 40.20.7)
I've had FIOS since 2006 and have routinely logged the router messages to a syslog daemon. Over those years I have gone through about 5 ActionTec routers; the current one in service since January. Although I don't dig through the logs often I do archive them (digital pack-rat) and have nearly 7 years of data.
Yesterday the router suddenly started logging what appear to be DNS requests from all the devices connected to it. In just 36 hours I have captured 19,844 requests.
Aug 2 07:29:28 2013 router RequestAddress=0x527488, requestDomainName=l3.yimg.com, client_id=231
Aug 2 07:29:28 2013 router esendto end
Aug 2 07:29:28 2013 router RequestAddress=0x527488, requestDomainName=t1.gstatic.com, client_id=233
Aug 2 07:29:28 2013 router esendto end
Aug 2 07:29:28 2013 router RequestAddress=0x520f88, requestDomainName=i.telegraph.co.uk, client_id=237
Aug 2 07:29:28 2013 router esendto end
Aug 2 07:29:28 2013 router RequestAddress=0x527488, requestDomainName=media.skynews.com, client_id=239
Aug 2 07:29:28 2013 router esendto end
Aug 2 07:29:28 2013 router RequestAddress=0x4479d0, requestDomainName=www.google.com, client_id=241... +19K requests
Aug 3 22:09:50 2013 router RequestAddress=0x51c780, requestDomainName=spynet2.microsoft.com, client_id=39505
Aug 3 22:09:50 2013 router esendto end
Aug 3 22:10:53 2013 router RequestAddress=0x449b48, requestDomainName=www.dslreports.com, client_id=39511
Aug 3 22:10:53 2013 router esendto end
The entries started appearing immediately after a firmware push Friday.
Aug 2 02:11:50 2013 router Upgrade file downloaded successfully.
Aug 2 02:11:53 2013 router cwmp_download: status=OK
Aug 2 02:11:53 2013 router The system is going DOWN for reboot.
Might be useful but also kind of creepy
↧