Omada ER605 (large ping attack)

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Omada ER605 (large ping attack)

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Henke99

2022-12-30 10:18:57

Posts: 1

Helpful: 0

Solutions: 0

Stories: 0

Registered: 2022-12-30

Omada ER605 (large ping attack)

2022-12-30 10:18:57

Model: ER605 (TL-R605)

Hardware Version: V2

Firmware Version: 2.0.1 Build 20220223 Rel.68551

Have quite a lot (Omada ER605 detected Large Ping attack and dropped 2 packets) every 30 minutes! I turned off the internet during the night as a sample, but at least get the same attacks?

I have access point TP-EAP670 but can't see any clients carrying out this attack

My question: How to get "Large Ping Attack" when the internet is shut down?

//Henrik

1 Reply

Lurk

LV2

2022-12-31 03:12:02 - last edited 2022-12-31 05:05:27

Posts: 26

Helpful: 12

Solutions: 0

Stories: 0

Registered: 2021-08-05

Re:Omada ER605 (large ping attack)

2022-12-31 03:12:02 - last edited 2022-12-31 05:05:27

Hi @Henke99

There is a long thread on the large ping attack issue here

https://community.tp-link.com/en/business/forum/topic/269886?page=6

It seems the alerts are generated by apple devices sending icmp packets from the LAN to the WAN.

And that's how the happen when your WAN is disconnected. It's the LAN side generating the alerts.

the no-Flag is also generated by traffic on the LAN side

Omada ER605 (large ping attack)

Omada ER605 (large ping attack)

Information

Voters 0

Tags