Hi guys,
I read this topic, and I maybe lost something, but I believe I could add a good point to this discussion.
I experienced some wifi connection drop since leopard, quitting and reopening safari usually solved the problem.
Now I am on Snow Leopard 10.6.2 and have similar problems: my wifi connection suddenly drops after about 30 minutes work. Turning airport off and back on usually solves the problem, but it is a big issue when working on remote machines.
The thing I want to add to this discussion, is that I asked my router about the security log and this is the output:
{quote}
2010.01.04 13:53:04 192.168.1.9 login success
2010.01.04 13:53:04 192.168.1.9 forced logout
2010.01.04 13:42:36 192.168.1.9 login success
2010.01.04 13:42:36 192.168.1.9 forced logout
2010.01.04 13:36:21 **TCP FIN Scan** 192.168.1.9, 50792->> 17.149.160.10, 80 (from ATM1 Outbound)
2010.01.04 13:36:21 **TCP FIN Scan** 192.168.1.9, 50802->> 151.7.11.145, 80 (from ATM1 Outbound)
2010.01.04 13:32:10 sending ACK to 192.168.1.5
2010.01.04 13:32:10 sending OFFER to 192.168.1.5
2010.01.04 13:31:20 **TCP FIN Scan** 192.168.1.9, 50792->> 17.149.160.10, 80 (from ATM1 Outbound)
2010.01.04 13:31:20 **TCP FIN Scan** 192.168.1.9, 50802->> 151.7.11.145, 80 (from ATM1 Outbound)
2010.01.04 13:27:42 **TCP FIN Scan** 192.168.1.7, 49518->> 74.125.39.149, 80 (from ATM1 Outbound)
2010.01.04 13:27:42 **TCP FIN Scan** 192.168.1.7, 49577->> 217.154.245.52, 80 (from ATM1 Outbound)
2010.01.04 13:26:38 **TCP FIN Scan** 192.168.1.7, 49698->> 151.7.11.136, 80 (from ATM1 Outbound)
2010.01.04 13:26:38 **TCP FIN Scan** 192.168.1.7, 49710->> 195.27.30.129, 80 (from ATM1 Outbound)
2010.01.04 13:25:35 **TCP FIN Scan** 192.168.1.7, 49334->> 209.85.135.118, 80 (from ATM1 Outbound)
2010.01.04 13:25:35 **TCP FIN Scan** 192.168.1.7, 49698->> 151.7.11.136, 80 (from ATM1 Outbound)
2010.01.04 13:24:31 **TCP FIN Scan** 192.168.1.7, 49698->> 151.7.11.136, 80 (from ATM1 Outbound)
2010.01.04 13:24:21 **TCP FIN Scan** 192.168.1.7, 49617->> 213.92.16.244, 80 (from ATM1 Outbound)
2010.01.04 13:23:28 **TCP FIN Scan** 192.168.1.7, 49698->> 151.7.11.136, 80 (from ATM1 Outbound)
2010.01.04 13:22:51 **TCP FIN Scan** 192.168.1.9, 50048->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:22:26 **TCP FIN Scan** 192.168.1.7, 49497->> 213.92.16.150, 80 (from ATM1 Outbound)
2010.01.04 13:22:26 **TCP FIN Scan** 192.168.1.7, 49312->> 209.85.135.91, 80 (from ATM1 Outbound)
2010.01.04 13:22:26 **TCP FIN Scan** 192.168.1.7, 49728->> 195.27.30.89, 80 (from ATM1 Outbound)
2010.01.04 13:22:26 **TCP FIN Scan** 192.168.1.7, 49241->> 151.7.11.145, 80 (from ATM1 Outbound)
2010.01.04 13:22:26 **TCP FIN Scan** 192.168.1.7, 49292->> 209.85.135.191, 80 (from ATM1 Outbound)
2010.01.04 13:22:24 **TCP FIN Scan** 192.168.1.7, 49518->> 74.125.39.149, 80 (from ATM1 Outbound)
2010.01.04 13:22:24 **TCP FIN Scan** 192.168.1.7, 49577->> 217.154.245.52, 80 (from ATM1 Outbound)
2010.01.04 13:22:24 **TCP FIN Scan** 192.168.1.7, 49698->> 151.7.11.136, 80 (from ATM1 Outbound)
2010.01.04 13:21:48 **TCP FIN Scan** 192.168.1.9, 50048->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:21:21 **TCP FIN Scan** 192.168.1.7, 49493->> 213.92.16.141, 80 (from ATM1 Outbound)
2010.01.04 13:21:21 **TCP FIN Scan** 192.168.1.7, 49708->> 151.7.11.136, 80 (from ATM1 Outbound)
2010.01.04 13:21:21 **TCP FIN Scan** 192.168.1.7, 49729->> 151.7.11.138, 80 (from ATM1 Outbound)
2010.01.04 13:21:05 **TCP FIN Scan** 209.85.135.191, 80->> 151.53.43.16, 49286 (from ATM1 Inbound)
2010.01.04 13:20:44 **TCP FIN Scan** 192.168.1.9, 50725->> 17.250.248.161, 5354 (from ATM1 Outbound)
2010.01.04 13:20:44 **TCP FIN Scan** 192.168.1.9, 50054->> 17.148.16.46, 993 (from ATM1 Outbound)
2010.01.04 13:20:44 **TCP FIN Scan** 192.168.1.9, 50058->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:20:33 **TCP FIN Scan** 192.168.1.7, 49708->> 151.7.11.136, 80 (from ATM1 Outbound)
2010.01.04 13:20:33 **Vecna Scan** 192.168.1.7, 49463->> 209.85.129.100, 80 (from ATM1 Outbound)
2010.01.04 13:20:33 **TCP FIN Scan** 192.168.1.7, 49334->> 209.85.135.118, 80 (from ATM1 Outbound)
2010.01.04 13:20:22 **TCP FIN Scan** 192.168.1.7, 49686->> 213.92.16.191, 80 (from ATM1 Outbound)
2010.01.04 13:20:16 **TCP FIN Scan** 192.168.1.7, 49275->> 74.125.43.166, 80 (from ATM1 Outbound)
2010.01.04 13:20:16 **TCP FIN Scan** 192.168.1.7, 49239->> 17.149.160.10, 80 (from ATM1 Outbound)
2010.01.04 13:19:41 **TCP FIN Scan** 192.168.1.9, 50048->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:19:19 **TCP FIN Scan** 192.168.1.7, 49638->> 213.92.16.217, 80 (from ATM1 Outbound)
2010.01.04 13:19:19 **TCP FIN Scan** 192.168.1.7, 49619->> 213.92.16.244, 80 (from ATM1 Outbound)
2010.01.04 13:19:07 **TCP FIN Scan** 192.168.1.7, 49435->> 194.244.107.100, 80 (from ATM1 Outbound)
2010.01.04 13:19:07 **TCP FIN Scan** 192.168.1.7, 49454->> 212.239.36.214, 80 (from ATM1 Outbound)
2010.01.04 13:19:07 **TCP FIN Scan** 192.168.1.7, 49329->> 209.85.135.104, 80 (from ATM1 Outbound)
2010.01.04 13:18:37 **TCP FIN Scan** 192.168.1.9, 50048->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:18:25 **TCP FIN Scan** 192.168.1.7, 49373->> 74.125.39.149, 80 (from ATM1 Outbound)
2010.01.04 13:18:24 **TCP FIN Scan** 192.168.1.7, 49277->> 74.125.3.84, 80 (from ATM1 Outbound)
2010.01.04 13:18:24 **TCP FIN Scan** 192.168.1.7, 49358->> 209.85.129.100, 80 (from ATM1 Outbound)
2010.01.04 13:18:06 **TCP FIN Scan** 192.168.1.7, 49435->> 194.244.107.100, 80 (from ATM1 Outbound)
2010.01.04 13:18:06 **TCP FIN Scan** 192.168.1.7, 49437->> 213.92.16.141, 80 (from ATM1 Outbound)
2010.01.04 13:18:06 **TCP FIN Scan** 192.168.1.7, 49439->> 213.92.16.31, 80 (from ATM1 Outbound)
2010.01.04 13:17:38 **TCP FIN Scan** 192.168.1.7, 49265->> 91.194.90.201, 80 (from ATM1 Outbound)
2010.01.04 13:17:34 **TCP FIN Scan** 192.168.1.9, 50048->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:17:25 **TCP FIN Scan** 213.92.11.242, 80->> 151.53.43.16, 49340 (from ATM1 Inbound)
2010.01.04 13:17:24 **TCP FIN Scan** 192.168.1.7, 49293->> 209.85.135.191, 80 (from ATM1 Outbound)
2010.01.04 13:17:10 **TCP FIN Scan** 192.168.1.7, 49274->> 74.125.43.154, 80 (from ATM1 Outbound)
2010.01.04 13:17:10 **TCP FIN Scan** 192.168.1.7, 49247->> 79.140.82.24, 80 (from ATM1 Outbound)
2010.01.04 13:17:10 **TCP FIN Scan** 192.168.1.7, 49238->> 17.149.160.27, 80 (from ATM1 Outbound)
2010.01.04 13:17:10 **TCP FIN Scan** 192.168.1.7, 49244->> 151.7.11.145, 80 (from ATM1 Outbound)
2010.01.04 13:17:09 **SYN Flood to Host** 192.168.1.7, 49323->> 209.85.135.91, 80 (from ATM1 Outbound)
2010.01.04 13:16:30 **TCP FIN Scan** 192.168.1.9, 50048->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:15:59 **TCP FIN Scan** 192.168.1.9, 50048->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:15:43 **TCP FIN Scan** 192.168.1.9, 50725->> 17.250.248.161, 5354 (from ATM1 Outbound)
2010.01.04 13:15:43 **TCP FIN Scan** 192.168.1.9, 50054->> 17.148.16.46, 993 (from ATM1 Outbound)
2010.01.04 13:15:43 **TCP FIN Scan** 192.168.1.9, 50058->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:15:35 **TCP FIN Scan** 192.168.1.9, 50048->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:15:31 **TCP FIN Scan** 192.168.1.9, 50062->> 192.135.10.19, 993 (from ATM1 Outbound)
2010.01.04 13:15:31 **TCP FIN Scan** 192.168.1.9, 50073->> 212.52.84.160, 143 (from ATM1 Outbound)
2010.01.04 13:15:31 **TCP FIN Scan** 192.168.1.9, 50048->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:15:31 **TCP FIN Scan** 192.168.1.9, 50054->> 17.148.16.46, 993 (from ATM1 Outbound)
2010.01.04 13:15:29 **TCP FIN Scan** 192.168.1.9, 50113->> 212.52.84.160, 143 (from ATM1 Outbound)
2010.01.04 13:15:29 **TCP FIN Scan** 192.168.1.9, 50056->> 192.135.10.19, 993 (from ATM1 Outbound)
2010.01.04 13:15:29 **TCP FIN Scan** 192.168.1.9, 50101->> 17.148.16.46, 993 (from ATM1 Outbound)
2010.01.04 13:15:29 **TCP FIN Scan** 192.168.1.9, 50438->> 74.125.39.109, 993 (from ATM1 Outbound)
2010.01.04 13:15:24 sending ACK to 192.168.1.9
2010.01.04 13:15:24 sending ACK to 192.168.1.9
2010.01.04 13:12:50 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:11:46 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:10:43 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:09:39 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:08:36 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:07:32 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:06:29 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:05:57 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:05:41 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:05:33 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:05:29 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:05:27 **TCP FIN Scan** 192.168.1.7, 49173->> 151.7.11.139, 80 (from ATM1 Outbound)
2010.01.04 13:02:06 **TCP FIN Scan** 192.168.1.9, 50641->> 209.85.135.139, 80 (from ATM1 Outbound)
2010.01.04 13:02:06 **TCP FIN Scan** 192.168.1.9, 50646->> 66.227.17.22, 80 (from ATM1 Outbound)
2010.01.04 13:02:06 **TCP FIN Scan** 192.168.1.9, 50647->> 209.85.135.155, 80 (from ATM1 Outbound)
2010.01.04 13:01:22 **TCP FIN Scan** 151.7.11.139, 80->> 151.53.43.16, 49175 (from ATM1 Inbound)
2010.01.04 13:00:31 **TCP FIN Scan** 213.92.16.191, 80->> 151.53.43.16, 49211 (from ATM1 Inbound)
2010.01.04 12:58:41 sending ACK to 192.168.1.7
2010.01.04 12:58:40 sending OFFER to 192.168.1.7
2010.01.04 12:58:36 sending OFFER to 192.168.1.7
2010.01.04 12:58:33 sending OFFER to 192.168.1.7
2010.01.04 12:58:31 sending OFFER to 192.168.1.7
{quote}
Please note that 192.168.1.7 is a Mac Mini connected by ethernet (who does not suffer of dropped connection) while 192.168.1.9 is my MacBook connected by wifi to my wireless 3Com router (3CRWDR100A-72).
It seems that my systems are running a tcp scan to some unknown addresses..
An investigation about this addresses let me know that they are all connected to mail accounts I read using Mail.
Further investigation on /private/var/log/system.log gives:
{quote}
Jan 4 13:30:20 john-does-macbook-3 Safari[711]: Periodic CFURLCache Insert stats (iters: 394) - Tx time:0.388056, # of Inserts: 49, # of bytes w
ritten: 656721, Did shrink: NO, Size of cache-file: 182534144, Num of Failures: 0
Jan 4 13:30:32 john-does-macbook-3 Mail[695]: Mail: SafetyNet not needed - wrongState:0
Jan 4 13:30:32 john-does-macbook-3 Mail[695]: Mail: SafetyNet issued SELECT before CLOSE - wrongState:0
Jan 4 13:30:32 john-does-macbook-3 Mail[695]: Mail: SafetyNet not needed - wrongState:0
Jan 4 13:30:32 john-does-macbook-3 Mail[695]: Mail: SafetyNet issued SELECT before CLOSE - wrongState:0
Jan 4 13:31:19 john-does-macbook-3 SystemUIServer[651]: It does not make sense to draw an image when [NSGraphicsContext currentContext] is nil.
This is a programming error. Break on _NSWarnForDrawingImageWithNoCurrentContext to debug. This will be logged only once. This may break in the future.
Jan 4 13:35:32 john-does-macbook-3 Mail[695]: Mail: SafetyNet not needed - wrongState:0
Jan 4 13:35:32 john-does-macbook-3 Mail[695]: Mail: SafetyNet issued SELECT before CLOSE - wrongState:0
Jan 4 13:35:32 john-does-macbook-3 Mail[695]: Mail: SafetyNet not needed - wrongState:0
Jan 4 13:35:32 john-does-macbook-3 Mail[695]: Mail: SafetyNet issued SELECT before CLOSE - wrongState:0
Jan 4 13:35:33 john-does-macbook-3 Mail[695]: Mail: SafetyNet not needed - wrongState:0
Jan 4 13:35:33 john-does-macbook-3 Mail[695]: Mail: SafetyNet issued SELECT before CLOSE - wrongState:0
Jan 4 13:35:33 john-does-macbook-3 Mail[695]: Mail: SafetyNet issued SELECT before IDLE - wrongState:0
{quote}
it seems to me that an error from Mail starts all this.
Does anybody have any idea to solve this problem?
Message was edited by: SnowPuma