Windows XP SP3 Causing Router Crashes 337
KrispyBytes writes "Windows XP SP3 has been named as the culprit causing home routers to go into a crash and reboot cycle. One router maker has released firmware updates to fix the problem, but has not yet revealed what is actually different about XP SP3's networking stack or UPnP behaviour that causes the problem. Router maker Billion Managing Director Raaj Menon said "as Microsoft plans to make Windows XP SP3 an automatic upgrade this month, the number of affected routers may increase significantly.""
Not surprising (Score:5, Funny)
Not surprising Windows causes that when installed on a router, considering it also makes PCs go into a crash and reboot cycle when installed on them.
Re:Not surprising (Score:5, Insightful)
Re:Not surprising (Score:4, Informative)
Re:Not surprising (Score:5, Interesting)
Maybe it's a coincidence and maybe it's not. The only way to know for sure is if Microsoft honestly comments on it.
Comment removed (Score:5, Informative)
Re:Not surprising (Score:5, Informative)
"Spanning tree malformations can do it".
The parent is either a wickedly funny troll, or an ignorant parrot. I just can't make up my mind..
Re: (Score:3, Funny)
Gotta be a troll. Here's the giveaway:
Re:Not surprising (Score:4, Insightful)
Re: (Score:3, Funny)
You must be new here.
Re: (Score:3, Insightful)
Yes, lets not blame Windows XP SP3... after all, this has happened with other OS's and other versions of Windows, right?
Oh, wait, this has only happened with XP SP3 machines....
So, again, what's the probability that it isn't Windows XP SP3 doing something wrong?
I'd say 100% seeing as that it is the router that is crashing.
Think of it this way, if writing this post made your computer crash, would it be my computers fault, or would it be yours?
Re: (Score:3, Insightful)
I'd say 100% seeing as that it is the router that is crashing.
Hmmm... what is the margin of error on that statistic?
Oh, nevermind... I came up with the same figure anyway. ;-)
Think of it this way, if writing this post made your computer crash, would it be my computers fault, or would it be yours?
Well, I'd like to blame it on your computer... and wonderfully, I can - and not be deemed insane. Things like that happen on /. all the time (like the guy I was responding to).
=)
Re:Not surprising (Score:5, Informative)
See though, here's the thing... who do you blame?
In a way it is (caused by) SP3... (because) of something the router cannot handle.
So, it raises a few better questions than the ones being raised here (the blame game):
- (ROUTER'S FAULT) Why can't the router handle whatever type of traffic - and should it? At the very least, as a possible attack vector for routers, shouldn't it?
- (NOT NECESSARILY SP3's FAULT, BUT STILL AN ISSUE) Why is SP3 generating such traffic? What type of traffic is it generating? Could this traffic be considered (or detected elsewhere as) a DOS attack of some sort? (We do know that enough SYN packets will crash various routers - even high end ones). What is SP3 actually attempting to do (regardless of HOW, the more important questions are WHAT and WHY).
So, while the router may be at fault for the behavior due to the type of traffic, SP3 is at fault for generating traffic of a nature that is not needed (in any way I can think of) to utilize the Internet... and considering some of the new ad and update and spyware and DRM technologies that MS is trying to bring over to XP (see previous /. articles, various MS patents and more regarding their search plans, "Live" product plans and more)... is this traffic not just flawed, but totally unwanted and intrusive? Or is it simply a screw-up on MS's part that happened to indicate vulnerabilities in various routers?
See the thing is, the reasons MS has such code creating such traffic may be important (or simply a screw-up)... but regardless of that, it showed vulnerabilities in various routers... but regardless of that, it also showed some sort of traffic that SP3 generates that may also be the cause of other routers (that arent affected adversely by such traffic) detecting as an attack of some sort, causing all sorts of other issues (for instance, a subnet or port being shut down to block the traffic).
Think how wonderful that would be if it was at a large company, medical institution, school, EMS station, etc... where all their machines were on a NAT network, and one of them that got upgraded to SP3 suddenly got their single shared IP blocked from the Internet.
So, I think there may be plenty of blame to point at both MS and the router manufacturers...
But the sad thing is, (and I am loathe to say this on /. where I am expected to make judgements based off little or no facts), until enough facts come out (showing what type of traffic, why the traffic is being generated, and what unaffected routers do when they receive the traffic), the only blame so far is:
- MS for doing something (traffic wise) that no other device or OS manufacturer seems to have ever done before.
- The router manufacturers in question for having an implementation that is not robust enough to survive such traffic without crashing.
Re:Not surprising (Score:5, Funny)
Re:Not surprising (Score:5, Funny)
I much prefer weed and alcohol. far cheaper and it makes you spaced out enough that even the AC become funny.
Before anyone goes on a MS rant (Score:5, Insightful)
maybe, maybe not (Score:5, Insightful)
And there is also the potential issue of this being UPNP related. UPNP is a completely bogus thing, but Microsoft strong armed the industry to support it and it's in most routers and many users don't know to disable it. UPNP could certainly give ways to cause this issue, and I only hold the router itself responsible to the extent that it supports this blasphemy.
Re: (Score:3, Interesting)
Re: (Score:3, Interesting)
Re: (Score:3, Insightful)
Re:Before anyone goes on a MS rant (Score:4, Insightful)
Even with this unlikely assumption in play it would still be 100% the fault of the router for crashing.
Re:Before anyone goes on a MS rant (Score:4, Insightful)
Re:Before anyone goes on a MS rant (Score:5, Insightful)
> behaving correctly.
Nonsense. Any router that can be crashed by anything that a computer connected to it does has a critical bug and should be recalled immediately.
Exactly (Score:2, Insightful)
Re:Nah... (Score:5, Insightful)
Re:Before anyone goes on a MS rant (Score:5, Insightful)
Re:Before anyone goes on a MS rant (Score:5, Interesting)
All browsers MUST expect garbage input, and pretty much anyone who expects otherwise has their head in the sand, and shouldn't go NEAR code. Document formats don't run in local memory and do not have system access - they're interpreted structures. If a browser crashes, it's the browser's (or it's plugins) fault, 100% of the blame 100% of the time. At worst, you should expect degraded-looking content and that's that.
I don't mean to be snarky, but your argument couldn't be more wrong or inappropriate. With networking, you're pretty close to the physical layer (not a great analogy, but browser code is far removed from traffic and is just a local representation, a user application).
We don't know yet what this is caused by. If it is affecting a lot of routers, it might very well be a "DOS". Or it could be something that holds too many connections open, or IP6 traffic that doesn't go anywhere and ties up the router table till it times out.
This could happen to Linux also, but it's less probable -- it's be code put out in the wild, and the distro's would do their own QA process, and may hold back. Most distros don't run kernel.org kernels, but their own patched tree.
Re:Before anyone goes on a MS rant (Score:4, Insightful)
Re:Before anyone goes on a MS rant (Score:5, Insightful)
Routers and layer 2/3 bridges have to react at wire speed, and therefore have lean, racing engine code with only the barest of exception handlers. Inside the code are lots of routines that have to react to protocol changes related to table building. Screw up those tables even legally (according to the obscurities of even well-known protocols) and the routing/bridging device will behave badly, even to the point of apparently not working. It's happened before, and will happen again. Is it XP3? No one knows yet.
The next update of will likely fix the problem; likely it would arrive before a Microsoft fix, and it would be more effective to fix the crashing device than go after all possible XP SP3 users. Sadly, once in the 'wild', it's the router vendor's problem rather than Microsoft's, no matter who is to blame for the original mistake.
Blaming the wrong programmers (Score:5, Insightful)
Re:Blaming the wrong programmers (Score:5, Insightful)
Re: (Score:3, Funny)
you're right, then all the routers would reboot at once... and the world would be at a standstill for an entire 30 seconds.
Re: (Score:2, Offtopic)
I re-installed and just got the updates singly from windows update. It might just be that my machine is four years old however, I'm not definitely sure it was SP3, it was just the timing that makes it seem that way.
Re: (Score:2)
i hate windows as much as the next guy but i agree, its not really Microsoft's fault.
Re:Blaming the wrong programmers (Score:5, Informative)
What if I was the other way around? (Score:5, Interesting)
Re: (Score:3, Insightful)
Would anyone notice?
Kidding aside, my first thought was this is CLEARLY a router problem. Even if SP3 is completely defective and sending out complete garbage to the router, the router should cope better than going into a 'crash and reboot cycle'.
Re: (Score:3, Interesting)
Re: (Score:3, Insightful)
Re: (Score:3, Interesting)
Microsoft (maybe) gets a slap on the wrist for not paying attention; the router manufacturers get a kick in the balls for producing junk.
No lies, just a bad track record. (Score:2, Informative)
Thats funny (Score:3, Funny)
So... (Score:5, Funny)
Re: (Score:2)
Happened to me... (Score:2, Informative)
Crashes Netgear MR814v3 (Score:4, Funny)
Works for me, and probably for you (Score:5, Interesting)
I've never used one, never seen one, never heard of one, and you haven't either. Odd how the summary fails to mention that the problem is only with this obscure model...
Same as Vista (Score:5, Informative)
From http://www.winsupersite.com/faq/xp_sp3.asp [winsupersite.com]
"Black hole" router detection algorithm. XP gains the ability to ignore network routers that incorrectly drop certain kinds of network packets. This, too, is a feature of Windows Vista.
Re: (Score:3, Insightful)
What if the router ran Linux? (Score:3, Funny)
I'm looking for guidance from the
Re:What if the router ran Linux? (Score:4, Insightful)
Re: (Score:2)
Re: (Score:2)
I think the most telling thing about this is the danger of monoculture. When routers are only tested against specific versions of Windows... But that's not a flame, as there's no one entity you can blame for this. Good routers wouldn't have this problem.
Buggy Routers (Score:5, Insightful)
Re: (Score:2, Insightful)
Re: (Score:3, Informative)
Interfaces that comply with the Ethernet standard are transformer isolated (except for the brain-damaged idea of POE, but only the most idiotic router designers would implement that (and even POE should be fused)).
Since I use Vista (Score:5, Funny)
Re:Since I use Vista (Score:5, Funny)
Obligatory quote (Score:2)
Router Trouble. (Score:5, Interesting)
What I don't understand is why so many of your basic 4 ports lan, one port wan, and an antenna type routers have such lousy firmware. I understand that the hardware is built right down to price, and isn't going to be exciting; but software is a different matter. There are really only a few chipset variations in general use, OpenWRT supports most of them and provides a solid and extensible foundation. ddWRT is less extensible and flashier, still solid. Tomatoe is out there as well. In a world where people are literally giving high quality router firmware away, how can anybody ship a router with bad firmware?
Crappy router. (Score:5, Interesting)
NAPT != Firewall (Score:5, Insightful)
Correlation != causation (Score:4, Insightful)
XP SP3 didn't _cause_ the bug; it merely happened to recreate a condition that triggered a bug inside the router to crash itself.
I installed SP3 (Score:5, Funny)
Re:I installed SP3 (Score:5, Funny)
You might try Mac OS. Or at the least, get an iPhone and use it liberally while in public.
Here's the technical reason (Score:5, Informative)
"After detail analysis, we found that Windows XP SP3 sent out the DHCP packet with the Option 43 data (include Microsoft's 'Vendor Specific Information'), but Windows XP SP2 sent out the DHCP packet without the Option 43 data. However, the Option 43 data is not compatible with Billion's original definition, so it will cause this problem. The affected firmware versions of BiPAC 5200 series are 2.9.8.x and 2.11.0.x~2.11.33.x. There is no impact to BiPAC 5200 series if the firmware is 2.10.x.x. Please check Appendix A for checking your current firmware version."
http://au.billion.com/downloads/Notice-Billion-5200-series-via-Windows-SP3.pdf [billion.com]
Re:Here's the technical reason (Score:5, Informative)
Re:Here's the technical reason (Score:5, Interesting)
That doesn't make sense, though. Option 43 is sent by the DHCP server to the client. In this case the SP3 machine is the client and the router is the server. It's the server's responsibility to correctly format the vendor-specific data according to the vendor's spec, but the SP3 box shouldn't be the server in the scenario in question.
Re: (Score:3, Interesting)
Aha. But it still doesn't make sense. If SP3 is sending option 43 as a client, then the data will be in Microsoft's vendor-specific format, not Billion's. The only way Billion would have a problem is if Microsoft changed the format without telling anyone. And why would a router need to look at Microsoft's vendor-specific information in the first place?
RTFRFC (Score:3, Insightful)
http://www.ietf.org/rfc/rfc2132.txt [ietf.org]
Re: (Score:3, Informative)
so is it microsofts fault also? (Score:2)
I'm sorry, broadband router manufacturer who? (Score:3, Insightful)
XP3 or the router's fault? (Score:2, Interesting)
Re: (Score:3, Informative)
> I completely disagree with the Windows fanboys who claim this is a non-story.
I claim it's a non-story and I sure as hell am not a "Windows fanboy".
What the /. reads this as.. (Score:2)
Billion's routers crash after upgrade to XP SP3.
OMG a Billion Routers crash....
Not MS to blame (Score:5, Insightful)
Now, if SP3 created nonstandard packets that most routers still swallow but a router drops because they don't work to spec, blame MS. If the router replied with a bogus message to said nonstandard packet that locked up XP, blame MS. But a router HAS TO be able to accept a bogus packet. It may drop it, report it or if it feels like it send it on a roundtrip in hope that some machine can figure out what it's about, but it may NEVER crash due to it.
I hope I don't have to mention the security implications of this.
What's worse (Score:4, Insightful)
So this isn't MS sending a bogus packet, or even doing a "Windows own spec," thing. They are properly following the DHCP spec, and this POS can't handle it. I mean I'll give someone a tiny bit of credit if the problem is due to bad data. Not a lot, it's still a bug that needs to be fixed, but at least it was something unexpected. However when you are crashing because you didn't deal with part of a spec, well then you get zero sympathy.
Speaking Of SP3... (Score:4, Interesting)
Could this be something that would hose a router as well? A ton of useless keep-alives?
one model from one manufacturer (Score:5, Informative)
This only affects one model (BiPAC 5200) wireless broadband router, from one manufacturer (Billion), who's firmware has a bug. The model in question is found in Australia and Europe. A firmware update is available for download. End of story.
Standards Shell Game? (Score:3, Insightful)
M$ creates the uPNP standard, then revises it, then revises it again. To the extent that it is a standard, different versions of the "standard" are made available to different router designers, based on how close they come to touching their palms to the floor when bending over for M$. Now, those who handed over their first born have the newer tweaked standard available, and if they comply their router doesn't crash. In the meantime, other router companies have a different/older standard, to which they comply fully. Of course, SP3 makes use of the newer, less widely disseminated standard. Doing so causes implementations that haven't "paid up" to crash.
Yes, this definitely sounds like a scenario imagined by a guy who wears a tin-foil hat to those who don't know the M$ history, haven't read the M$ internal documents known as the Halloween Documents [catb.org], etc. To people who know the history and understand how M$ works, this is a likely though unproven scenario.
Re:Maker? (Score:5, Funny)
Re: (Score:3, Funny)
Re: (Score:2, Funny)
I think YOU meant "I"
We could go on forever, couldn't we?
Re:Other Glitches? (Score:5, Funny)
I updated to SP3 yesterday, and now my microwave stopped working.
Coincidence? I think not!
Re: (Score:2, Informative)
apples to oranges (Score:5, Insightful)
Or did Linux developers just go a step further than Windows did, and take it upon themselves to make sure that hardware works properly on their OS?
Re:Other Glitches? (Score:4, Funny)
And I have heart burn....Hmmmm, I think you've discovered something here!
Re: (Score:3, Funny)
"Oil prices reach $138/barrel on news that.."
"...Stock Exchange installs Windows XP SP3"
Re:Other Glitches? (Score:4, Informative)
Boot a live Linux CD such as Knoppix and see if it works. It's a handy way to swap OS for testing.
Re: (Score:3, Funny)
Re: (Score:2)
What version of Firefox are you running?
Re: (Score:2)
...And you all think that Microsoft is anti-competitive?
Re: (Score:2)
Re: (Score:2)
Re: (Score:3, Insightful)
Re: (Score:3, Informative)
Re:Oh brother... (Score:5, Insightful)
Unlikely, given that the OP mentions that at least one manufacturer has fixed the problem with a firmware update. You can't really write software to fix a problem until you've figured out what the problem is.
You're right though, a properly hardened router will keep ticking regardless of what's plugged into it. Mostly. [fiftythree.org]
Re:Glad I disabled auto-updates (Score:5, Informative)
Re:Glad I disabled auto-updates (Score:5, Informative)
Right, until a "critical security update" turns that option right back on. Better to just turn off Automatic Updates and disable Security Center in Administrative Tools > Services so it stops whining about your computer "not being protected".
Re: (Score:3, Informative)
Don't just disable it, remove it from your System. It's just another networking service and it can be un-installed.
Although, as the parent poster mentioned, it's not beyond Microsoft to re-install it as part of a Service Pack/Security Update. (See Windows Messenger).