Router detected Large Ping attack and dropped 7 packets.
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Hello everyone.
I have a new network infrastructure running a few days now in a new office under construction.
There I have 3 omada devices (Router, POE Switch and EAP) and a wired security system.
Today i added a Win10 laptop for a video conference and i have more than 10 alerts at omada's log like this one: "Router detected Large Ping attack and dropped 7 packets."
The same happened about 1 week before when added the security system in the network, but after it stopped. No other PC or other network device was connected to the network.
So is this normal, every time i add a new network device, or it is an attack?
Is this critical ? Is this a Ping attack?
Should i take care of these, or remove these alerts from omada's alert emails ?
Thanks
E.A
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
@dbfinlay same here with iPhone 13, 7 and my ring doorbell....
- Copy Link
- Report Inappropriate Content
@Fae - When can we expect the update for ER605 v1 to come through.
It's now been quite a few months since the update went through to the OC200. However the ER605 v1 hasn't had a firmware release since 15/06/22.
- Copy Link
- Report Inappropriate Content
Hi !
Same issue here. Packets dropped every 30mn approximatively this night, coming from the IP of my Macbook Air whereas it was in sleep mode...
Note that I have 4 LAN and many ACL rules implemented, could it be linked ?
Thanks
- Copy Link
- Report Inappropriate Content
@Fae I'm running the ER605 v1 on version 1.2.1. I'm still not getting the IP information for this in the logs, just that the router "detected Large Ping attack and dropped packets." Is the IP information still coming out in a new update?
- Copy Link
- Report Inappropriate Content
Hello @PruntWHAT,
PruntWHAT wrote
@Fae I'm running the ER605 v1 on version 1.2.1. I'm still not getting the IP information for this in the logs, just that the router "detected Large Ping attack and dropped packets." Is the IP information still coming out in a new update?
Please ensure that both your Omada Controller and Router are updated to the firmware adapted to Controller v5.6 or later version.
For ER605 V1, the following new Beta firmware has added support for displaying the Source IP address of large Ping attack packets.
ER605 V1_1.2.3_Build 20230413 Beta Firmware For Trial (Released on Apr 14th, 2023)
- Copy Link
- Report Inappropriate Content
updated to latest beta's on OC200v1 and ER605v1, no ip on old large pings will have to wait and see if i get the info on new ones.
Off topic, the new "Tools" do not work with ER605 v1.0 TL-SG2210MP v1.0 EAP235-Wall(US) v1.0 and the OC200v1 is even slower.
It was worth the shot of upgrading to beta's to get the most basic of information about an alert or even to be able to ping between 2 devices, I got excited my bad.
- Copy Link
- Report Inappropriate Content
@DonkeyCongo after the last update served destruction on many networks I think there is a degree of nervousness about releasing the next update. It has been beta for a long time, and is provided a solution to fixing some of the logs issues and whatever else was happening with the routers. Make sure the auto upgrade is turned off and let the brave upgrade first.
- Copy Link
- Report Inappropriate Content
I had large pin attack every hour until I downloaded the firmware from the official website and install the firmware . The reason is scammer steal the tp link account password and verification code from my iPhone side by Bluetooth malware. Then send the modified firmware through to cloud update. I shut down the cloud access. Shut down iPhone find my iPhone which is main access to Bluetooth malware. Now whole system is working perfectly and has o alert.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 18
Views: 64585
Replies: 89
Voters 2
