Jump to content
Search In
  • More options...
Find results that contain...
Find results in...
Aiien79

Should I be concerned about packets sent?

Recommended Posts

Posted · Original PosterOP

Hello, my internet (I'm Australian) has been really laggy for the past few months since switching to NBN FFTC. I am using the TP-Link Archer VR1600v and even entering 192.168.1.1 is REALLY slow. Navigation on the settings page takes minutes to load even on a wired connection. However I have been able to find what may be causing my wifi to lag and that is the large amount of wireless light-bulbs and power switches we have connected to our guest network. I notice they are receiving quite a few packets and sending a lot of packets. The image I have attached shows a few of these devices compared to my Galaxy Note 9 which is connected to the normal 5GHz network. I haven't been able to use the wifi on my device properly which is probably why it has such low numbers, but in comparison the random light-bulbs and power switches are sending more packets than my phone.

Should I be concerned about them sending out so many packets? Also when I do disable the guest network my wifi connection on my phone is very good and can actually load reddit images.

image.png

Link to post
Share on other sites

Looks like your devices may be part of a botnet....


QUOTE ME IN A REPLY SO I CAN SEE THE NOTIFICATION!

When there is no danger of failure there is no pleasure in success.

Link to post
Share on other sites

That definitely doesn't look normal. I'd recommend either disabling the guest network for a bit to see if performance improves, or disable internet access for the guest network. 

 

If the light bulbs for some reason require internet access, find out what ports they require and only allow those ports. Even better, if you know what addresses they need to be communicating with, only allow communication to those addresses over specific ports. 

 

As @Samfisher said, they could be part of a botnet, they really shouldn't require much bandwidth. 

Link to post
Share on other sites
Posted · Original PosterOP
24 minutes ago, Samfisher said:

Looks like your devices may be part of a botnet....

 

21 minutes ago, Oshino Shinobu said:

That definitely doesn't look normal. I'd recommend either disabling the guest network for a bit to see if performance improves, or disable internet access for the guest network. 

 

If the light bulbs for some reason require internet access, find out what ports they require and only allow those ports. Even better, if you know what addresses they need to be communicating with, only allow communication to those addresses over specific ports. 

 

As @Samfisher said, they could be part of a botnet, they really shouldn't require much bandwidth. 

Thanks for your answers! I just disabled the guest network for the past 20 minutes and so far my wifi has improved noticeably. However, accessing my routers settings page is still really slow and we actually have a few uses for the light-bulbs and power switches. If it is a botnet is there anyway I could detect or get rid of it? Not sure if factory resetting every IOT device would help.

Link to post
Share on other sites

Did you actually reboot the router yet? 


F@H
Desktop: i7-5960X 4.4GHz, Noctua NH-D14, ASUS Rampage V, 32GB, RTX2080S, 2TB NVMe SSD, 2x16TB HDD RAID0, Corsair HX1200, Thermaltake Overseer RX1, Samsung 4K curved 49" TV, 23" secondary

Mobile SFF rig: i9-9900K, Noctua NH-L9i, Asrock Z390 Phantom ITX-AC, 32GB, GTX1070, 2x1TB NVMe SSD RAID0, 2x5TB 2.5" HDD RAID0, Athena 500W Flex (Noctua fan), Custom 4.7l 3D printed case

 

Dell XPS 2 in 1 2019, 32GB, 1TB, 4K

 

GPD Win 2

Link to post
Share on other sites
21 minutes ago, Aiien79 said:

 

Thanks for your answers! I just disabled the guest network for the past 20 minutes and so far my wifi has improved noticeably. However, accessing my routers settings page is still really slow and we actually have a few uses for the light-bulbs and power switches. If it is a botnet is there anyway I could detect or get rid of it? Not sure if factory resetting every IOT device would help.

If you disconnect the router from the internet does accessing the settings page speed up? If the IOT devices are compromised, could be that the router is as well, or was the first point exploited to gain entry. 

 

If it speeds up after disconnecting from the internet, I'd advise factory resetting all the IOT devices and the router, then upgrading to the latest firmware and software for each of the devices and router before connecting them back to the internet. 

 

Afraid I can't help with detecting if they are indeed compromised, It's beyond my knowledge of IOT devices. 

Link to post
Share on other sites
Posted · Original PosterOP

Yeah I've rebooted router a lot throughout the pass few months, it makes no difference to the load times :( 

1 hour ago, Kilrah said:

Did you actually reboot the router yet? 

Link to post
Share on other sites
14 hours ago, Aiien79 said:

Yeah I've rebooted router a lot throughout the pass few months, it makes no difference to the load times :( 

Have you disconnected from the internet?  Just unplug the ethernet that goes from modem to router.


QUOTE ME IN A REPLY SO I CAN SEE THE NOTIFICATION!

When there is no danger of failure there is no pleasure in success.

Link to post
Share on other sites
21 hours ago, Aiien79 said:

Hello, my internet (I'm Australian) has been really laggy for the past few months since switching to NBN FFTC. I am using the TP-Link Archer VR1600v and even entering 192.168.1.1 is REALLY slow. Navigation on the settings page takes minutes to load even on a wired connection. However I have been able to find what may be causing my wifi to lag and that is the large amount of wireless light-bulbs and power switches we have connected to our guest network. I notice they are receiving quite a few packets and sending a lot of packets. The image I have attached shows a few of these devices compared to my Galaxy Note 9 which is connected to the normal 5GHz network. I haven't been able to use the wifi on my device properly which is probably why it has such low numbers, but in comparison the random light-bulbs and power switches are sending more packets than my phone.

Should I be concerned about them sending out so many packets? Also when I do disable the guest network my wifi connection on my phone is very good and can actually load reddit images.

image.png

Be aware that if this is from the WiFi page then "sent" probably means from the router TO the wireless device.


Router: i5-7200U appliance running pfSense WiFi: Ubiquiti nanoHD (~700Mbit peak throughput)
ISP: Zen Unlimited Fibre 2 (66Mbit) + Plusnet Unlimited Fibre Extra. (56Mbit)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

Newegg

×