Board logo

connection trouble
JoelP - 14/9/04 at 06:35 PM

im suffering from a slow connection, and many sites dont work. A quick look in the firewall log shows many examples of this:

in order, date time action protocol src-ip dst-ip src-port dst-port size tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info path

2004-09-14 19:30:31 DROP TCP 212.23.59.15 81.106.61.84 80 1336 52 FA 2931577285 1685038218 16384 - - - RECEIVE

anyone understand what this means?! im getting a headache thinking about it. ive already deleted many junk cookies to no avail, and many looked like spyware. any help appreciated.


JoelP - 14/9/04 at 06:38 PM

all the dropped ones come from these 3 ip addresses:

217.204.9.252
212.23.59.15
81.23.243.22

any way to find these sites?!


Chris_R - 14/9/04 at 06:51 PM

You can find out who the domains belong to with the ARIN WHOIS Database Search or the RIPE Whois Database

I think that 217.204.9.252 belongs to Akamai Technologies of the US, 212.23.59.15 belongs to AKAMAI Streaming Media and 81.23.243.22 also belongs to Akamai Technologies. Don't quote me on that though.

[Edited on 14/9/04 by Chris_R]

[Edited on 14/9/04 by Chris_R]


Hellfire - 14/9/04 at 07:01 PM

Probably just your ISP having a bad day!


Chris_R - 14/9/04 at 07:10 PM

Akami Technologies are a reseller like Pipex or BT, so those ips will belong to their customers. They've got a site at http://www.akamai.com/index_flash.html

Additional - " Akamai Technologies, Inc. provides a global delivery service for Internet content, streaming media and applications that improves Website speed, quality, reliability and scalability and protects against Website crashes. For the six months ended 6/30/04, revenues rose 33% to $99.2M. Net income totaled $9.7M vs. a loss of $23.3M. Results reflect an increase in service revenue and number of customers and lower general & admin. expenses."

http://www.forbes.com/finance/mktguideapps/compinfo/CompanyTearsheet.jhtml?tkr=AKAM

[Edited on 14/9/04 by Chris_R]


JoelP - 14/9/04 at 09:44 PM

the bastards... seeing as their IP address is the source and im the destination, i guess they are either sending me crap or trying to do mischief with my tool. I feel like finding them and kicking their collective teeth out one by one. i've pissed about all night trying to see my fav sites, and you know what an addict i am...

yours fuming...

ps ta for the info chris! and for your words of encouragement hellfire


JoelP - 14/9/04 at 09:51 PM

this is cut and pasted from the Q&A section on their website. I've sent an email to them about it, asking them to stop the communication abuse... see what happens i guess. still fuming...



Q: My firewall has blocked Internet access to my computer on TCP Port #### from port 80 of your company's server. Why?

A: When you connect to a site that is "Akamaized," your browser downloads an HTML file containing embedded URLs that tell your browser that some of the objects necessary to finish displaying the page are located on Akamai servers. Next, your browser contacts an Akamai server to obtain these images or streaming content. Since the contact is made from port 80 of our server, this transaction is a legitimate HTTP connection. Generally a TCP service runs on a server on a well-known port number less than 1024; in this case the service is httpd and it runs on port 80. A client connects with a random port number greater than 1023 that is assigned by the local operating system.

For example, your operating system can open up ports 1566, 1567, and 1568 to all connect to port 80 of our web server to retrieve 3 images.