Omada ER605 (large ping attack)

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Omada ER605 (large ping attack)

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Omada ER605 (large ping attack)
Omada ER605 (large ping attack)
2022-12-30 10:18:57
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version: 2.0.1 Build 20220223 Rel.68551

Hi

Have quite a lot (Omada ER605 detected Large Ping attack and dropped 2 packets) every 30 minutes!  I turned off the internet during the night as a sample, but at least get the same attacks?

 

I have access point TP-EAP670 but can't see any clients carrying out this attack

 

My question: How to get "Large Ping Attack" when the internet is shut down?

 

 

//Henrik

  0      
  0      
#1
Options
1 Reply
Re:Omada ER605 (large ping attack)
2022-12-31 03:12:02 - last edited 2022-12-31 05:05:27

Hi  @Henke99

 

There is a long thread on the large ping attack issue here

 

https://community.tp-link.com/en/business/forum/topic/269886?page=6

 

 

It seems the alerts are generated by apple devices sending icmp packets from the LAN  to the WAN.

And that's how the happen when your WAN is disconnected. It's the LAN side generating the alerts.

 

the no-Flag is also generated by traffic on the LAN side

 

 

 

 

 

 

 

 

 

  0  
  0  
#2
Options