bdservicehost flooding my internet connection
Hello,
while troubleshooting my internetconnection loss i saw in my firewall log (on my asus AC-88U router) that a pc in my network was flooding my connection.
Apr 24 22:48:53 kernel: ACCEPT IN=br0 OUT=eth0 SRC=192.168.2.187 DST=34.120.68.241 LEN=52 TOS=0x00 PREC=0x00 TTL=127 ID=2170 DF PROTO=TCP SPT=58643 DPT=443 SEQ=1182331192 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402)
Apr 24 22:48:53 kernel: ACCEPT IN=br0 OUT=eth0 SRC=192.168.2.187 DST=34.120.68.241 LEN=52 TOS=0x00 PREC=0x00 TTL=127 ID=2171 DF PROTO=TCP SPT=58644 DPT=443 SEQ=2691978489 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402)
Apr 24 22:48:53 kernel: ACCEPT IN=br0 OUT=eth0 SRC=192.168.2.187 DST=34.120.68.241 LEN=52 TOS=0x00 PREC=0x00 TTL=127 ID=2172 DF PROTO=TCP SPT=58645 DPT=443 SEQ=3797644717 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402)
Apr 24 22:48:53 kernel: ACCEPT IN=br0 OUT=eth0 SRC=192.168.2.187 DST=34.120.68.241 LEN=52 TOS=0x00 PREC=0x00 TTL=127 ID=2173 DF PROTO=TCP SPT=58646 DPT=443 SEQ=2376419495 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405B40103030801010402)
Above is an SMALL extract : this entries appear +- 100 entries /second for a period of +- 10 sec. During this period my router spikes to 100% and internet connection is down.
While checking on the PC 192.168.2.187 i saw the BDservicehost as being the owner of the sourceport mentioned in my firewall log (in above extract : 58643,58644,58645,58646)
bdServicehost is not consuming more the 2 or 3% cpu and ram is around 400Mb.
Anybody any suggestions as to why bdservicehosgt is sending out this burst of connections?
Any suggestions to correct?
Is this a bug?
Thx,
Thierry
