X

Visitor

 • 

6 Messages

Monday, January 2nd, 2023 5:26 PM

Closed

Modem / Gateway Logs - What do you see? Is mine different?

Hi all,

I'm trying to determine what's going on with my device logs. I was hoping that a few people might post what the results are when they follow the following path. 

  1. Log into your Xfinity Gateway
    1. Go to 10.0.0.1
    2. Use admin password to enter the device interface

  2. Obtain the Firewall Logs
    1. On the left menu, click Troubleshooting
    2. Click Logs
    3. Start with Firewall Logs and change the time frame to Last 90 days
    4. Click Show Logs
    5. Click Ok that it may take a long time (usually it won't)
    6. Copy and paste from the header "Firewall Logs" down to the print and download buttons
    7. Post any results into your response here
  3. Obtain the System Logs
    1. Start with System Logs and change the time frame to Last 90 days
    2. Click Show Logs
    3. Click Ok that it may take a long time (usually it won't)
    4. Copy and paste from the header "System Logs" down to the print and download buttons
    5. Post any results into your response here

  4. Obtain the Event Logs
    1. Start with System Logs and change the time frame to Last 90 days
    2. Click Show Logs
    3. Click Ok that it may take a long time (usually it won't)
    4. Copy and paste from the header "Event Logs" down to the print and download buttons
    5. Post any results into your response here

I am asking because my gateway appears to have limited all my logs to only a single day. For example, here is the entirety of my Firewall Logs even though my system uptime is currently 2 days, 2 hours, 6 minutes. They used to show reports daily for each firewall block type which it no longer does. It also seemed to restart the counts and start a new day at a weird time (not midnight). I'm still trying to figure out the timing of that. My system logs have a multiday record of logins and logouts. My event logs are entirely blank. 

Do others have a similar output or is this odd? 

Firewall Logs

All logs for Last 90 Days
FW.IPv6 INPUT drop , 9853 Attempts, 2023/1/2 12:19:06 Firewall Blocked
FW.IPv6 FORWARD drop , 332 Attempts, 2023/1/2 10:58:00 Firewall Blocked
FW.WANATTACK DROP , 11 Attempts, 2023/1/2 06:58:00 Firewall Blocked
 

System Logs

All logs for Last 90 Days
GUI: User:admin login 2023/1/2 12:12:39 Notice
GUI: User:admin login 2023/1/2 11:15:08 Notice
GUI: User:admin logout 2022/12/31 22:57:49 Notice
GUI: User:admin login 2022/12/31 21:48:02 Notice
GUI: User:admin login 2022/12/31 13:56:22 Notice
GUI: User:admin logout 2022/12/31 10:00:21 Notice
GUI: User:admin login 2022/12/31 08:50:30 Notice
GUI: User:admin logout 2022/12/31 08:30:19 Notice
GUI: User:admin login 2022/12/31 07:46:08 Notice
GUI: User:admin logout 2022/12/31 03:54:48 Notice
GUI: User:admin login 2022/12/31 02:45:04 Notice
GUI: User:admin logout 2022/12/31 01:54:48 Notice
GUI: User:admin login 2022/12/31 00:45:06 Notice
 

Event Logs

All logs for Last 90 Days
 

Official Employee

 • 

6.9K Messages

2 years ago

Hello @XfiSubscriber. The logs were limited to one day after a recent update on our end. 

Visitor

 • 

9 Messages

2 years ago

@XfinityChe​ You guys really need to figure out what's going on with the firewall issues in the modems. There are so many forum posts about people getting the same firewall logs and it causing disconnections. Logs similar to what he posted above. Ever since you guys "upgraded" the network in my area on December 1st, 2022 I've been having this issue. Every time my network drops a new firewall log shows these blocks. It seems like you had something in the old backbone equipment that blocked it before getting to the our modems that obviously can't handle it. I've had 2 different new modems and have added my own router since it started. I tried turning off the firewall in the modem on IPv4 and IPv6 and letting my router handle the protection, but apparently the firewalls can't be disabled. Even though the modem still shows my changed settings of them being disabled, the modem still blocked the traffic. I also had a technician out and showed him the logs and he looked at it like it was Greek. I know they likely aren't trained in that area, but at least acknowledge it and bring it up with a supervisor or something.

FW.IPv6 INPUT drop , 9853 Attempts, 2023/1/7 12:19:06 Firewall Blocked
FW.IPv6 FORWARD drop , 332 Attempts, 2023/1/7 10:58:00 Firewall Blocked
FW.WANATTACK DROP , 11 Attempts, 2023/1/7 06:58:00 Firewall Blocked

Visitor

 • 

5 Messages

2 years ago

Is this what is resetting the gateway every 25-30ish minutes?

Still hunting to find the creds to access the gateway settings.  

Thanks,

forum icon

New to the Community?

Start Here