Home Network Community > All Threads > Log entries
< All Threads

Log entries

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
12

Log entries

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Log entries
Log entries
2024-05-05 20:50:54
Model: Archer AX55  
Hardware Version: V1
Firmware Version: 1.2.6 Build 20231130 rel.36135(5553)

I recently RMA'd this router and am using the replacement router now.

 

For testing, I reboot the router and see the following initialization entries:

 

####################################################################
#                  Archer AX55 System Log
# Time = 2024-05-05 13:10:24
# H-Ver = 1.0.0 ; S-Ver = 1.2.6 Build 20231130 rel.36135
# LAN: I = 192.168.0.1 ; M = 255.255.255.0 ; MAC =  
# WAN: W = dhcp ; I = 199.201.161.60 ; M = 255.255.255.192 ; MAC =  
#      G = 199.201.161.1 ; D1 = 8.8.8.8 ; D2 = 0.0.0.0 
# Clients connected: 4 ; WI-FI : 2 
####################################################################
2024-05-05 13:10:09 led-controller[1082]: <6> 288051 Start to run WAN1_ON
2024-05-05 13:10:09 led-controller[1082]: <6> 288051 Start to run WAN0_OFF
2024-05-05 13:10:08 led-controller[1082]: <6> 288051 Start to run LAN_ON
2023-11-30 00:02:13 upnp[20666]: <6> 217504 Service start
2023-11-30 00:02:13 upnp[20666]: <6> 217505 Service stop
2023-11-30 00:02:11 qos[18196]: <6> 259504 Service start
2023-11-30 00:02:10 remote-management[20298]: <6> 282505 Service stop
2023-11-30 00:02:05 qos[18196]: <6> 259502 Function enabled
2023-11-30 00:02:05 qos[18196]: <6> 259505 Service stop
2023-11-30 00:02:02 nat[17463]: <6> 211021 IPSEC ALG enabled
2023-11-30 00:02:02 nat[17463]: <6> 211021 L2TP ALG enabled
2023-11-30 00:02:02 nat[17463]: <6> 211021 PPTP ALG enabled
2023-11-30 00:02:02 nat[17463]: <6> 211021 SIP ALG enabled
2023-11-30 00:02:02 nat[17463]: <6> 211021 RTSP ALG enabled
2023-11-30 00:02:02 nat[17463]: <6> 211021 H323 ALG enabled
2023-11-30 00:02:02 nat[17463]: <6> 211021 TFTP ALG enabled
2023-11-30 00:02:02 nat[17463]: <6> 211021 FTP ALG enabled
2023-11-30 00:01:56 nat[17463]: <6> 211501 Initialization succeeded
2023-11-30 00:01:56 led-controller[1082]: <6> 288051 Start to run WAN1_ON
2023-11-30 00:01:56 led-controller[1082]: <6> 288051 Start to run WAN0_OFF
2023-11-30 00:01:56 led-controller[1082]: <6> 288051 Start to run LAN_ON
2023-11-30 00:01:55 nat[17463]: <6> 211501 Initialization succeeded
2023-11-30 00:01:52 dhcpc[17168]: <6> 210054 receive ack from server with ip 199.201.161.60, options(subnet=255.255.255.192;router=199.201.161.1;dns=8.8.8.8 149.112.112.112;lease=28800;serverid=147.92.88.115;cliid=01/d0:50:99:5d:e1:c4:;)
2023-11-30 00:01:51 dhcpc[17168]: <6> 210053 send select request with options(cliid=01/d0:50:99:5d:e1:c4:;reqip=199.201.161.60;serverid=147.92.88.115;)
2023-11-30 00:01:51 dhcpc[17168]: <6> 210052 receive offer from server with ip 199.201.161.60, options(subnet=255.255.255.192;router=199.201.161.1;dns=8.8.8.8 149.112.112.112;lease=28800;serverid=147.92.88.115;cliid=01/d0:50:99:5d:e1:c4:;)
2023-11-30 00:01:51 dhcpc[17168]: <6> 210051 send discover with ip 0.0.0.0 and flags 80
2023-11-30 00:01:50 led-controller[1082]: <6> 288051 Start to run WAN1_OFF
2023-11-30 00:01:50 led-controller[1082]: <6> 288051 Start to run WAN0_ON
2023-11-30 00:01:50 led-controller[1082]: <6> 288051 Start to run LAN_ON
2023-11-30 00:01:50 nat[16710]: <6> 211501 Initialization succeeded
2023-11-30 00:01:50 nat[16710]: <6> 211501 Initialization succeeded
2023-11-30 00:01:48 led-controller[1082]: <6> 288051 Start to run STATUS_ON
2023-11-30 00:01:47 qos[15657]: <6> 259504 Service start
2023-11-30 00:01:42 qos[15657]: <6> 259502 Function enabled
2023-11-30 00:01:41 led-controller[1082]: <6> 288051 Start to run GENERAL
2023-11-30 00:01:35 traffic-stats[14596]: <6> 269504 Service start
2023-11-30 00:01:23 factory-reset[13212]: <6> 284504 Service start
2023-11-30 00:01:22 parental-control[12711]: <6> 229504 Service start
2023-11-30 00:01:22 parental-control[12711]: <6> 229502 Function enabled
2023-11-30 00:01:19 access-control[12191]: <6> 239504 Service start
2023-11-30 00:01:19 access-control[12191]: <5> 239606 Flush conntrack table succeeded
2023-11-30 00:01:19 access-control[12191]: <6> 239502 Function enabled
2023-11-30 00:01:16 access-control[12191]: <7> 239011 black list add mac: 64:12:36:B8:6E:C4
2023-11-30 00:01:16 access-control[12191]: <7> 239011 black list add mac: 44:D8:78:81:00:0B
2023-11-30 00:01:15 access-control[12191]: <7> 239011 black list add mac: 78:61:7C:A1:A6:A3
2023-11-30 00:01:15 access-control[12191]: <7> 239011 black list add mac: CA:55:09:F1:C9:60
2023-11-30 00:01:13 nat[11577]: <7> 211001 Flush conntrack
2023-11-30 00:01:13 nat[11577]: <6> 211502 Function enabled
2023-11-30 00:01:13 nat[11577]: <5> 211051 Create NAT chain succeeded
2023-11-30 00:01:11 nat[11577]: <6> 211501 Initialization succeeded
2023-11-30 00:01:10 nat[11577]: <6> 211501 Initialization succeeded
2023-11-30 00:01:09 basic-security[11134]: <6> 219504 Service start
2023-11-30 00:01:09 basic-security[11134]: <5> 219606 Flush conntrack table succeeded
2023-11-30 00:01:07 firewall[10355]: <6> 209504 Service start
2023-11-30 00:00:30 led-controller[1082]: <6> 288051 Start to run WIFI5G_ON
2023-11-30 00:00:30 led-controller[1082]: <6> 288051 Start to run WIFI2G_ON
2023-11-30 00:00:16 remote-management[3520]: <6> 282505 Service stop
2023-11-30 00:00:10 imb[2792]: <6> 218507 Daemon connection succeeded
2023-11-30 00:00:10 imb[2792]: <6> 218012 ARP Binding disabled
2023-11-30 00:00:10 imb[2792]: <6> 218506 Config interface initialization succeeded
2023-11-30 00:00:10 imb[2792]: <6> 218501 Initialization succeeded
2023-11-30 00:00:08 upnp[2510]: <6> 217504 Service start
2023-11-30 00:00:08 upnp[2510]: <6> 217505 Service stop
2023-11-30 00:00:06 remote-management[2136]: <6> 282505 Service stop
2023-11-30 00:00:05 dhcpc[1935]: <6> 210056 teardown and release
2023-11-30 00:00:05 dhcpc[1935]: <6> 210051 send discover with ip 0.0.0.0 and flags 80
2023-11-30 00:00:00 time-settings[1252]: <6> 279504 Service start
1970-01-01 00:00:33 led-controller[1082]: <6> 288051 Start to run STATUS_SAN
1970-01-01 00:00:32 led-controller[1082]: <6> 288504 Service start

 

Questions: 

 

1. Today's date is 2024-05-05.  Why are the dates in the log showing as 2023-11-30 during router reboot?  

 

2. In the following statement:

 

2023-11-30 00:01:52 dhcpc[17168]: <6> 210054 receive ack from server with ip 199.201.161.60, options(subnet=255.255.255.192;router=199.201.161.1;dns=8.8.8.8 149.112.112.112;lease=28800;serverid=147.92.88.115;cliid=01/d0:50:99:5d:e1:c4:;)

 

where is the secondary DNS of 149.112.112.112 coming from?  It appears to be residual from the past and is not being cleared out of cache!

 

DNS=8.8.8.8 is Goggle owned

149.112.112.112 is QUAD 9 owned

 

I cannot find 149.112.112.112 in any of the value fields in the router.  Where is it being drawn from???

 

3. What are the blacklist MAC addresses for?

  0      
 
  0      
 
#1
Options
16 Reply
Re:Log entries
2024-05-05 23:52:58

  @Jojo99 

 

It seems like there's an old configuration settings on that device.

Blacklisted MAC addresses are devices that have been restricted to access your local network.

What you can do is to factory reset the AX55 by pressing its reset button for about 10 seconds.

This should delete all its previous settings and you have to reconfigure AX55 from scratch.

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".
  0  
  0  
#2
Options
Re:Log entries
2024-05-06 23:04:45

  @terziyski - Further examination shows that those blocked items are from the Tether app, which I blocked from a previous housemate that I shared my net ocnnection with.  That was question #3

 

You didn't answer questions #1 & #2.  Can you please do so now?

  0  
  0  
#3
Options
Re:Log entries
2024-05-06 23:17:37

  @Jojo99 

 

#1 - That's normal, until the router NTP service is started the time may not be accurate and it shows a date in the past.

#2 - These DNS servers are most probably received by your ISP via DHCP service on yout Internet (WAN) port - you can put different if you wish.

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".
  0  
  0  
#4
Options
Re:Log entries
2024-05-07 00:06:59 - last edited 2024-05-07 00:08:57

  @terziyski - The primary and secondary fields of the DHCP section in the router advanced settings are blank.

 

c2bcf4c110f34700a20854c860524979

 

However, under Network|Internet|Advanced settings I see the following:

 

4e8ce9e704c846418ae8c85cfc8d8ee4

 

How do I clear these primary & secondary DNS fields?

 

If I chnage from "Get Dynamically from ISP"  to "Use the following DNS Addresses", then I have to choose a primary DNS (Googles 8.8.8.8 in this case) and the seocndary remains blank.  

23890de1b5834ac9b41a7449e46d7f85

 

But if I switch back to "Get Dynamically from ISP" the old 149.112.112.112 reappears.  This looks like a bug, where the router does not clear the old info.

 

I am digging deep into this because I am trying ot understand why the router disconnects intermittently when I use DNS (QUAD9 - 9.9.9.9, 149.112.112.112) but these intermittent disconnects do not occur when I use DNS (8.8.8.8).  I don't know if part of the problem is because TPLink is not clearing information correctly and causing a conflict or if the problem is on the ISP's side.

 

  0  
  0  
#5
Options
Re:Log entries
2024-05-07 00:28:53

  @Jojo99 

 

As I posted when you use Get Dynamically form ISP you're receiving the DNS IP's from your ISP by DHCP.

If you want to change them to your choice Use the Following DNS Addresses:

 

6d14fa014ffd484f94ffa1a1542dff6b

 

That's not a bug - just use these DNS IPs that work better for you.

Bonus tip: You may update your AX55 with this FW - the newest FW release (v1.3.1) with many improvements.

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".
  0  
  0  
#6
Options
Re:Log entries
2024-05-07 02:35:40

  @terziyski - I did see the updated FW and installed.  I don't see anything that has changed other than a better visual on the left menu as to where I am at.

 

As happens to often in these forum back and forth, the focus of the original problems is being lost as we wade through details.

 

Let's step back.

 

My problem is that I want to use DNA Quad9 (9.9.9.9).  I can't seem to do that because I get intermittent internet drops.  These drops last for 30 seconds to 15 minutes, usually.and fix themselves.

 

I am trying to discover if the problem is due to TPLink or to my net provider.

 

When the TLINK AX55 router doesn't clean up old info and puts info where it shouldn't be, it makes it hard to try and figure out who is at fault here - TPLINK or my net provider!

 

Right now, my router status shows this:

 

a8c2956212d94cdebb0e75d3c60fbb6a

 

aff2925bcb384ca7b4f94aa884b3ce5b

 

My settings are to get the DNS dynamically from the ISP.  So ALL the primary & secondary DNS numbers SHOULD BE blank!  Otherwise someone looking quicky at the status would think that yes, I AM using DNS 8.8.8.8  & 149.112.112.112.

 

Now, looking at some TPLINK log entries,  it really does look like the router is telling the ISP to use these DNA addresses 8.8.8.8 & 149.112.112.112, even though the router is supposed to get the DNS address from the ISP dynamically!

 

2024-03-25 00:01:57 DHCPC INFO [18149] receive ack from server with ip 199.201.161.60, options(subnet=255.255.255.192;router=199.201.161.1;dns=8.8.8.8 149.112.112.112;lease=28800;serverid=147.92.88.115;cliid=01/d0:50:99:5d:e1:c4:;)

 

2024-03-25 00:01:57 DHCPC INFO [18149] send select request with options(cliid=01/d0:50:99:5d:e1:c4:;reqip=199.201.161.60;serverid=147.92.88.115;)

 

2024-03-25 00:01:57 DHCPC INFO [18149] receive offer from server with ip 199.201.161.60, options(subnet=255.255.255.192;router=199.201.161.1;dns=8.8.8.8 149.112.112.112;lease=28800;serverid=147.92.88.115;cliid=01/d0:50:99:5d:e1:c4:;)

 

2024-03-25 00:01:57 DHCPC INFO [18149] send discover with ip 0.0.0.0 and flags 80

 

How can anyone tell what is the real status of the router is with left-over, junk data?

  0  
  0  
#7
Options
Re:Log entries
2024-05-07 11:22:23 - last edited 2024-05-07 13:26:01

  @Jojo99 

 

I don't think that the focus has been moved from your original inquiry.

If you want to be sure that there's no left-overs in the router settings you can do a factory reset by pressing its reset button for about 10 seconds.

This will wipe all previous configuration settings on your AX55.

"So ALL the primary & secondary DNS numbers SHOULD BE blank!"

That's not correct - if your internet connection DNS IP addresses are blank you won't have an internet connection (you won't be able to resolve any domain names to their IP addresses) without DNS settings.

If you want to know what DNS IP addresses your ISP is using - just call them and ask them about that (Get Dynamically from ISP case).

If you want to use different DNS IP addresses, just use the other setting - Use the Following DNS Addresses and put your DNS IPs of choice.

As for the Quad9 (9.9.9.9) DNS problem you are experiencing - I don't have that answer and you should work with your ISP to check what/where could be the problem.

If you want to contact your local TP-Link support you can do that here. I believe there's a chat option as well.

Apart from all that If you want to know more about configuring DNS over HTTPS/TLS - read through this FAQ.

If this was helpful click once on the arrow pointing upward. If this solves your issue, click once the star to mark it as a "Recommended Solution".
  0  
  0  
#8
Options
Re:Log entries
2024-05-07 12:43:35

  @Jojo99 

 

Just wonder what the DNS settings are on your computer.

  0  
  0  
#9
Options
Re:Log entries
2024-05-07 21:28:49

  @ArcherC8 - COmputer network is set to "Obtain DNS server automatically"

  0  
  0  
#10
Options
Re:Log entries
2024-05-07 21:33:23 - last edited 2024-05-07 21:36:01

  @terziyski - YOU ARE losing focus!  So let me try again and keep this as simple as possible for you.  In the following screen grab from my router, what DNS server(s) am I using?

 

BTW: Are you a TPLINK employee?

 

ff0694e3af9e4f2faea1bf151a45593f

  0  
  0  
#11
Options
12

Information

Helpful: 0

Views: 905

Replies: 16

Related Articles
Meaning of these log entries
282 0
Log has weird entries
1870 0
Lack of System Log Entries
2671 1
Weird NULL entries in Archer C7 router system log
1257 2
Repeating entires in log
815 0
Weird syslog entries-Did I get hacked?
1028 0
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.