This happens when your device is with low ram available, < 8MB.

Nope. Happens more often than that. Router has 2GB RAM installed (x86).

I think this is a well-known bug for more then a year.

I think our Latvian friends are overwhelmed with working on new features, new products, a lot of incompatibility issues and strange bugs, that this one is very low priority.

It has always been my opinion that they should expand staff but paying good professionals will lower the owners riches so...

It has always been my opinion that they should expand staff but paying good professionals will lower the owners riches so...

I have to agree here, after getting a recent email from Mikrotik informing me that due to other priorities HWMP+ was not being actively maintained, and that they would not be able to investigate a repeatable problem that is a major issue for us (stale FDB entries when clients connect via wlan interfaces then roam)

My RB450G just upgraded from 5.6 to 5.7 .
It works fine, but the CPU usage get high in "dhcp" package.
Anyone has this?

We also have this problem. I already sent supout file to support but they say the cannot find anything ...

I have that problem also This is on a 450G board:

Code: Select all

          cpu-used: 100
  cpu-used-per-cpu: 100%
       free-memory: 242784

Me too. 100% on dhcp. On 450G

Actually I have a couple of stable routers with 5.7 (450G and x86 P4 one core/thread). I guess its a hit and miss This is still not good enough though as I have a ton of other routers with tons of issues.

Can't paste into a terminal brought up from webfig. Would be useful, used it all the time in winbox. Using OSX and Safari or Firefox, current versions.

tk

This happens when your device is with low ram available, < 8MB.

Nope. Happens more often than that. Router has 2GB RAM installed (x86).

I think this is a well-known bug for more then a year.
...

Please note that this happens not only when UPnP makes a NAT rule for the WinBox port, getting in the way of us connecting, but in cases when UPnP is not turned on as well.

I've tested 5.7 on rb750, the problem I found was too heavy cpu performance up to 100%, when I look at the /tool profile turned out to flash takes a lot of resources. And I return to 5.5 everything is running normally again.

Could it be you stumbled on a scheduled flash check or something else that is scheduled to run as a maintenance task?

MikroTik staff please clarify if such tasks are likely to cause 100% CPU.

On the cpu at 100%, in my case I use Zenoss to monitor the network. Zenoss re-models each device every 12 hours which uses snmp. At those intervals, I see 100% cpu warnings coming from the 5.7 ROS devices. I didn't see that in 4.17.

When will be 5.8 I have ton of problems with RB1200

Thank you for recent release and addressing a lot of issues we had with 5.6.

A few months ago I asked if it would be possible to add back the ability to sort by port in the Torch. Back then I thought I was all by myself but now if I search on port sort, I see a lot more people complaining about the loss of this function.

A lot of "strange" activity can't always be detected by a smart script or a config, which is why we also scan our network routers manually, especially when the maps report packet loss or unusual traffic.

THe ability to sort by port (both for src and dst) allows us to reveal viruses, aggressive and encrypted P2P, a stuck process that tries to go to Adobe, etc. etc.

Would it be possible to add this function back to the Winbox GUI?
What was the reasoning in taking it out?

When will be 5.8 I have ton of problems with RB1200

What kind of problems?

I have problems with the dns server. This is the second time this week that my Mikrotik RouterOS 5.7 Core DNS stopped responding.

I try ping google from console and I get IP DNS error or something like that. I reboot the rb1200 and works fine for a few more days.

This never happened to me with OS 5.6. I'm using google's dns (8.8.8.8 & 8.8.4.4).

Does anyone have any idea of what could be the problem?

Thank you.

Google's DNS server itself had problems ?

When it happened to me I just put in another DNS server.

I'm testing with my ISP DNS now, but if the DNS server is the problem shouldn't be solved by rebooting the rb1200.

I'm testing with my ISP DNS now, but if the DNS server is the problem shouldn't be solved by rebooting the rb1200.

OH yes it can.
Your server stores dns resolves in a cache. If this was a piece of date coming from the google dns server you cache has the faulty data. When you reboot your router the cache gets flushed and new data needs to be used. If now this new data is ok the router works fine, for as long as it takes to get the wrong data from google again....

When I had the problem I tried flushing the dns cache in the rb1200. It gets empty and it doesn't take any more request so I continue without browsing...

From my experience there is a problem with ROS' built-in DNS resolver when cache size is set to value bigger than 8192 kB.
With different versions of ROS there was same problem, no response from DNS cache.
Also max. UDP packet size should be increased to value bigger than default 512 bytes (4096-8192).

HTH,

Why would the DNS packet be so big?

ROS v5.7 doesn't print and export IPv6 addresses of BGP peers:
There is the same problem with export. IPv6 adresess are always assigned as (unknown). WinBox shows IPv6 addresses correctly without any problems.

Why would the DNS packet be so big?

Because to allow support for DNSSEC packet size allowed should be a minimum of 4096

The second issue is related to the packet size. The authors of the DNSSEC standard realized that there might be a potential problem with TCP queries. TCP puts a higher burden on the DNS servers. (TCP is much more expensive to process than UDP.) To avoid too much TCP traffic, the authors made the EDNS0 extension mandatory for DNSSEC. EDNS0 is a standard that among other things allows a client to signal that it is capable of receiving DNS replies over UDP that are larger than the previous limit of 512 bytes. Some firewalls are not aware of the fact that the EDNS0 standard allows for larger packets and they block any DNS packet larger than the previous limit. Other firewalls allow for the large packets by default, whereas a few vendors require the firewall to be manually configured to do so. Any device in the path that does packet inspection in the application layer must be aware of the EDNS0 standard to be able to make a correct decision whether to forward the packet or not.

Source: http://www.circleid.com/posts/operation ... ng_dnssec/

I have problems with the dns server. This is the second time this week that my Mikrotik RouterOS 5.7 Core DNS stopped responding.

I try ping google from console and I get IP DNS error or something like that. I reboot the rb1200 and works fine for a few more days.

This happens on 4.x versions for OpenDNS servers 208.67.220.220 and 208.67.222.222 and for Google DNS servers too.
The particular routerboard for DNS resolving runs HotSpot and is a gateway for the network, ROS 4.17.
One thing I noticed is that you CAN ping the IP address, for ex.208.67.220.220 from the DNS resolver routerboard, but you CAN'T ping the same IP address from the inside of the network, for ex. from client who is authenticated on the HotSpot and Skype running, you get an answer from the DNS resolver routerboard: "destination host unreachable".

I've noticed this problem with earlier versions starting from 4.5 (don't sure for earlier versions) and only a reboot fixes it. Hope this will shred more light on this problem.

So I should make a script that checks ping to google.com and reboot the router automatically or is there another way?

What is Mikrotik's opinion in this matter?

The legend is: while reading ip address: could not get answer from dns server

I'm putting the dns cache back to 1024k, I had it at 10240k for more caching.

I'll let you guys know if it happends again.

if you where running 5.7 maybe you could send supout.rif, in case we could find out more about the problem you encountered.

ROS 5.7, firmware v. 2.36. I Have the problem - RB435G at random times(it may be one hour or one day) freezes ethernet interfaces to pass ip traffic, interface at that time says that "link ok"(i use 1G connection with different devices at different places, ~8 BOARDS with PC and board-to-board connections, most time of all its freezes at 2 RB435g's with bridge functions- wireless interface bridged with ethernet, not matter with which - ether1 or ether2 or ether3), wireless interface at the same time work properly and i can access the board via wireless, after rebooting board its' all right for a random time. A guess i have similar problem with the same topics - http://bugs.mikrotik-routeros.com/view.php?id=15, http://forum.mikrotik.com/viewtopic.php ... 1&start=50, http://forum.mikrotik.com/viewtopic.php ... 5G#p282149, http://forum.mikrotik.com/viewtopic.php?f=3&t=55610 etc.

Only one solution is to turn off or on /interface Ethernet switch set 0 switch_all_ports=yes or no, after that routerboard starts to transmit data. But i don't use hardware switch for boards, no master or slave interfaces, only program switch for bridging Ethernet iface with wireless, Don't know exact what the problem is, power supply is good, cables is good(at first time we think that the cables cat5e was caused the problem for 1G connection, and than replaced them to cat7 cables - have the same issue).
A hope for some assistance, it's not suitable to downgrade software or firmware on boards to avoid similar problems with configuration - a can't to stop transmission through that link cause they are situated on commercial towers and it's not real to get the boards directly.
Anyone suggest?
My opinion - it's a firmware trouble of RB435G at a side of Ethernet sensitivity, may be i'm wrong.
I hope the MTIK team to help.
Thanks

MikroTik gigabit ports have trouble from time to time.

RB450G different 5x versions different boards
RB250GS firmware 1.6

Auto-negotiation issues? Some sort of additional instability?

Hi,

i have some troubles with this version:
on RB450G: high CPU usage (DHCP package) - i`m using vlans, so DHCP server is connected to vlan, not ethernet directly.
on all boards (and all 5x versions, i think):
- DNS package - when i remove static record, this one persist in memory until router is rebooted.
- Graphs: are completly deleted, when RB is rebooted.
so, i`m waiting for next version of RouterOS.

I love how MikroTik are improving on features like the Sniffer. The new filters are awesome.

My home RB450G was running 5.7 since it was released and just today it made me a problem (apart from DNS issues I thought were due to 8.8.8.8 being down)

The problem was that in Profile tool I could see sniffing making close to 100% CPU so I took a supout for support, rebooted, put in the latest unreleased 5.8 in the share subfolder and rebooted again.

Now testing with share 5.8 from the 12th.

Cheers.

I love how MikroTik are improving on features like the Sniffer. The new filters are awesome.

Esp. saving to a file and then load the dump in wireshark is a great feature which helped a lot already.

I love how MikroTik are improving on features like the Sniffer. The new filters are awesome.

huh, I love the Forum - you can learn many new things from users when you must learn it from developers =) Normis, please add it to the changelog?

I love how MikroTik are improving on features like the Sniffer. The new filters are awesome.

huh, I love the Forum - you can learn many new things from users when you must learn it from developers =) Normis, please add it to the changelog?

do you see something that is not in the manual?

do you see something that is not in the manual?

argh, sorrrrry, overworking is killing my attention %(

I am subscribed to WiKi pages but never receive e-mail notifications that hey were edited

Hi ...

I was running 5.7 on a RB433 + R52nM(PMP) + XR9(PTP) where the ETH is tied to an EOC1650 working as AP for 5 customers (sort of direct access with their laptops, tablets, etc). All natted, PMP & ETH have different IP ranges.

DHCP on ETH stop leasing from time to time (time seems equal to dhcp lease time, 24h in this case).

Was enough to wake it up back reboot the 1650 or disable / enable 433 eth (e.g. any change on ETH status).

Downgraded to 5.6 => no more problems.

Regards;

I'm still having DNS problems. The service DNS seems to stop working. In tools > profile, seems right but the DNS cache list gets empty and stop caching and resolving host.

The only way to fix it is rebooting the RB1200.

tamahome, did you try the latest 5.8 pre-release version ?

sorry if this has already been discussed, but does anyone know why wireless signal drops almost 10db when upgrading from 4.2? I have a PtP link I upgraded today, was at -61db, using 2x2 Mimo with SR71-15 cards. Signals on BOTH chains -60/-61, after the upgrade all the way to 5.7, AND bios update, the signals are now -74/-76 , I've checked and all the wireless settings are the same, nothing changed other than firmware update. what's the deal??????????? I've had this happen on 4 different PtP links now. I'm only upgrading cause I want NV2, but why such the sacrifice in signal?

tamahome, did you try the latest 5.8 pre-release version ?

Where is possible to download these pre-release versions?

And what if you raise the tx power, does go back to normal?

pre-release version - tell MT support via e-mail what your issue is and they should give you the link

I've had this happen on 4 different PtP links now. I'm only upgrading cause I want NV2, but why such the sacrifice in signal?

NV2 is TDMA not OFDM and is good for PtMP links where you have a lot of noise, but for PtP links without a lot of noise just use nstreme. It has more throughput and less latency.

I've had this happen on 4 different PtP links now. I'm only upgrading cause I want NV2, but why such the sacrifice in signal?

NV2 is TDMA not OFDM and is good for PtMP links where you have a lot of noise, but for PtP links without a lot of noise just use nstreme. It has more throughput and less latency.

Please check TDMA and OFDM with wikipedia.
NV2 is TDMA on top of OFDM and nv2 does not perform
better with noise. It performs better than nstreme where
there is no noice as it needs no polling. Instead it uses a
Map like wimax where the AP tells all CPEs at once when
to send. With noise I see 802.11 perform better then nstreme
and better then nv2.

I've had this happen on 4 different PtP links now. I'm only upgrading cause I want NV2, but why such the sacrifice in signal?

NV2 is TDMA not OFDM and is good for PtMP links where you have a lot of noise, but for PtP links without a lot of noise just use nstreme. It has more throughput and less latency.

Wrong. NV2 has WAY more throughput than Nstreme, on 3 links already, that were short distance, 2X2, I was only able to get a steady 216x240Mbps. Turning on NV2 now its a rock-solid 300x300Mbps, and I can push almost twice the throughput on bandwidth tests, up to 210Mbps. Your right about latency though...

OK, this is my field experience. I use RB711 so single chain only, on a tower with a lot of Radio and TV stations, some of them with Mega Watts of power so I guess its a pretty "noisy" place . The PtP link is with Signal levels around -60dB, Noise level -110 dB ??? as reported from RB711, 13km perfect LOS, ROS 4.17 to 5.5 all the same. Tested on various frequencies range from 5000 to 6000 MHz.
-with Nstreme: Initially link is OK, data rates 150/150Mbps, CCQ 90-100%, Bandwidth test shows around 100Mbits UDP. The problem comes when real traffic is passed, around 20-30Mbits of traffic, CCQ starts to drop below 50%, data rates also drop below 54Mbps, ping goes high and that's about it. No more than 30Mbits throughput.
-with NV2: Initially the same conditions as with Nstreme, data rates 135/135 Mbps. When real traffic is passed, CCQ also drops but stays around 60-70%, data rates 81/108 Mbps and around 60Mbits total throughput.

So NV2 performs better then Nstreme in this kind of "noisy" situation. The question is WHY?

When I applied diplexers on both sides, with 100MHz channel, so say only 5700-5800 MHz range is passed, everything else is heavily attenuated, the same link is now working with Nstreme with 90% CCQ, data rates 121/135Mbits, 80Mbps throughput. I haven't change anything, all the same, Routerboards, pigtails, antennas, cables only difference are applied filters.

I don't know, maybe I'm missing something here but that's the results from real traffic not UDP Bandwidth test.

One thing I have noticed, NV2 usually performs better on dual-chains, it seems running 2 chains creates some sort of self-interference with Nstreme, and sometimes I get worse data rates with 2 chains then single. However, activating NV2 makes 2 chains work together much better. My experience, single chain = Nstreme, Dual Chain = NV2.

I have not tried 5.8pre, I'm still waiting for the final version to see if it is a bug.

I can confirm: as soon as you disable the interface used by dhcp-client, 'dhcp' process eats the whole CPU core until reboot

upd: after disabling dhcp-client, CPU goes down, just not momentarily

good morning everyone,


I own a 1100 with RB ros 5.7
The CPU is constantly at 100%, the profile indicates that the DHCP module is consuming 85%.

On the DHCP Client, it is installed but there is no interface added to it.

[xxxxx @ xxxxxx> ip dhcp-client print
Flags: X - disabled, I - invalid
# INTERFACE ADDRESS USE ADD STATUS
[xxxxx @ xxxxxx]>


DHCP logs are common.

multiquote removed, making this post 75% more easier to read

According to Normis of Mikrotik:
"remember also that in v5.7 there is a DHCP server bug, where it causes high resource usage if it's on a disabled interface. this is fixed in v5.8"

Yup, enabling the disabled DHCP on a fully functioning vlan interface fixed it.

In my case, I have a RB in 1100 with 2 vlans DHCP and both are active.
Still, my CPU is constantly at 100% and in profile, the DHCP module is usndo 85% to 90% of the processing.

Well test the 5.8 pre-release already?

DO NOT USE these unless you are prepared somehow to fix your network quickly as these may even brick your device - neither I nor anyone takes responsibility of what happens if you use these test versions

I have put them on many routers except powerpc and so far all 5.8 test versions worked without major issues but I still can not guarantee that your network will be just fine.

These files change from time to time - I download regularly and compare CRC32. When uploaded to a router you also see the date the package was put together.

http://www.mikrotik.com/download/share/ ... 86-5.8.npk
http://www.mikrotik.com/download/share/ ... pc-5.8.npk
http://www.mikrotik.com/download/share/ ... be-5.8.npk
http://www.mikrotik.com/download/share/ ... le-5.8.npk

If you use User-Manager package DO NOT UPGRADE as you will need that package as well - ask support for 5.8 version of it for the platform(s) you use

If you notice any issues - get supout.rif from router and maybe a screenshot and send to support.

Will there be implemented in the new version of the chipset support Intel H61?

It should work already? Have you encountered any problem when testing?

Mikrotik version 5.7 installed on this hardware:
Processor: Intel Core i5-2300
Motherboard: Asus P8H61 (Chipset Intel H61)
Network card: Intel PRO 1000GT Desktop Adapter
The system motherboard chipset is defined as "Unknown device", and the amount of traffic is limited to 200-210 Mbps.
If we use the following hardware:
Processor: Intel Core 2 Duo E6750
Motherboard: Asus P5KC (Chipset Intel P35)
Network card: Intel PRO 1000GT Desktop Adapter
The system chipset motherboard reports the correct
Productivity rises to the level of 290-300 Mbps, which in my case is the correct figure

P.S. Spoken English I know little, because I apologize for the quality of texts.

Could be on the slower board the LAN card is connected to PCI bus and the faster - on PCI-e bus.

If you are running windows on the slower board - post a screenshot of Device Manager but viewed by Connection so we see to what the NIC/LAN card is connected.

(don't forget to give karma but I have a paypal account as well )

Could be on the slower board the LAN card is connected to PCI bus and the faster - on PCI-e bus.

On both motherboards are the same network cards are placed in the slot PCI 2.0

If you are running windows on the slower board - post a screenshot of Device Manager but viewed by Connection so we see to what the NIC/LAN card is connected.

Screenshots do not yet possible

Continue of ethernet flapping interface problem /sorry for copypasting the thread, have no time/ :

Same trouble with http://www.mikrotik.com/download/share/ ... be-5.8.npk, ethernet freezes after 1 day of work, downgrading ROS to 4.17 have solve this problem.

ROS 5.7, firmware v. 2.36. I Have the problem - RB435G at random times(it may be one hour or one day) freezes ethernet interfaces to pass ip traffic, interface at that time says that "link ok"(i use 1G connection with different devices at different places, ~8 BOARDS with PC and board-to-board connections, most time of all its freezes at 2 RB435g's with bridge functions- wireless interface bridged with ethernet, not matter with which - ether1 or ether2 or ether3), wireless interface at the same time work properly and i can access the board via wireless, after rebooting board its' all right for a random time. A guess i have similar problem with the same topics - http://bugs.mikrotik-routeros.com/view.php?id=15, viewtopic.php?f=1&t=55021&start=50, viewtopic.php?f=0&t=55021&p=282149&hilit=435G#p282149, viewtopic.php?f=3&t=55610 etc.

Only one solution is to turn off or on /interface Ethernet switch set 0 switch_all_ports=yes or no, after that routerboard starts to transmit data. But i don't use hardware switch for boards, no master or slave interfaces, only program switch for bridging Ethernet iface with wireless, Don't know exact what the problem is, power supply is good, cables is good(at first time we think that the cables cat5e was caused the problem for 1G connection, and than replaced them to cat7 cables - have the same issue).
A hope for some assistance, it's not suitable to downgrade software or firmware on boards to avoid similar problems with configuration - a can't to stop transmission through that link cause they are situated on commercial towers and it's not real to get the boards directly.
Anyone suggest?
My opinion - it's a firmware trouble of RB435G at a side of Ethernet sensitivity, may be i'm wrong.
I hope the MTIK team to help.
Thanks

What exactly is the other device, switch that is connected to the ports that stop working?

When problem happens, can you send supout to support?

I had similar issues as well, with RB250GS, RB450G (died), RB750 but with different software versions.

What exactly is the other device, switch that is connected to the ports that stop working?

When problem happens, can you send supout to support?

I had similar issues as well, with RB250GS, RB450G (died), RB750 but with different software versions.

It's not matter what device connected on other side, in my case - PC with Intel Gb adapter, RB450G, or other RB435G board, but most of all it's freezes at a stack of 2 RB435G's - one time on first board, next time on second in random time.
I just forgot to send supout because i immediately had downgrade all RB's to 4.17 and enable nv2-wireless package. unfortunately, 4.17 does not achieve that speed throught wireless as 5.3 and higher versions of ROS ((.

What if you tweak the Ethernet auto-negotiation options?

What if you tweak the Ethernet auto-negotiation options?

1G connection seems to be work only on auto-negotiation.
Other thing - 433AH boards on 100M FD works fine at ROS 5.5 at the same tower, troubles probing only at 1G connections.
Any suggest?

I want to signal a strange issue, not 100% that it is related to this firmware (i can not identify the exact moment in time when it happened, but it seems synchronized to the upgrade).

HW: Routerboard 450G, setup as NAT + PPPoE
I updated from 4.17 to 5.7 one month or so ago. And i saw a steep drop in performance and blamed it on the ISP (from 90Mb/s to 2.5Mb/s).
In the last days i tried to find the cause since my ISP stated it is all ok. Checking the direct link gave me 45Mb/s, so the provider had nothing to do with it.
When checking System -> Resources in Winbox, the CPU frequency got somehow set to 100MHz instead of 680MHz (i didn't do it on purpose since i didn;t know about that option ).
Changing the value back to 680MHz (System->Routerboard->Settings) gave me a peak NAT performance of 190Mb/s.

If someone complains of low speed, this parameter could be worth a look.

Greetings,
"Doc" Marius

i have problem in one of my x86 routers: it stops routing. It can be pingable, it can ping others routers, i can connect to it, reboot fix problem. Last time it happened i was unable create supout file beacause i have to fix it quickly. If it happens again i will create supout file.
# NAME VERSION SCHEDULED
0 system 5.7
1 ntp 5.7
2 dhcp 5.7
3 advanced-tools 5.7
4 routing 5.7

Can you please post a /ip routing export and /ip route export Thanks.

i have problem in one of my x86 routers: it stops routing. It can be pingable, it can ping others routers, i can connect to it, reboot fix problem. Last time it happened i was unable create supout file beacause i have to fix it quickly. If it happens again i will create supout file.

This exactly happened to me right yesterday with rOS v5.6 on 450G.
I checked Interfaces IP addresses and routes, all seemed OK. DHCP server on the router wasn't answering either.
I generated a supout before rebooting unit, I'll send it to support.

No dhcpv6...

It would be cool if Mikrotik had some kind of bugtracker, wouldn't it?

Normis has said this is planned for 5.8, I'm planning on holding him to that!

http://wiki.mikrotik.com/wiki/Manual:IPv6/Pool

'Secretly' downloaded 5.8 and I managed to get DHCPv6 working. Cool.

Somewhat documented now: http://wiki.mikrotik.com/wiki/Setting_up_DHCPv6

Somewhat documented now: http://wiki.mikrotik.com/wiki/Setting_up_DHCPv6

also, http://wiki.mikrotik.com/wiki/Manual:IP ... erver#IPv6

What about DHCPv6 client and receiving prefix delegation via DHCP client?

What about DHCPv6 client and receiving prefix delegation via DHCP client?

exactly that - you will be able to receive prefix using '/ip dhcp-client' that is in "secret 5.8" already.

Nice. Just checked it...
The only part missing now is to do this on a PPP(oE) interface...

When will "secret 5.8" be out ?



It will be good to finally have DHCPv6-PD !

I hope it will be release totally totally REALLY completely 101% stable. I can wait.

I hope it will be release totally totally REALLY completely 101% stable. I can wait.

+1

I hope in new release the report problem in the user manager will be fix, I hope

Is it correct that I cannot do DHCPv6 and Radius?

Is it correct that I cannot do DHCPv6 and Radius?

Did someone say that it couldn't be done? The DHCP Server (4 and 6) has a checkbox for "USE RADIUS". Also, the Radius config window allows you to enter an IPv4 or an IPv6 address for a remote radius sever.

I now, and I've seen that. But I do not see any requests on Radius when doing DHCPv6. So it might not be implemented yet.

I love how MikroTik are improving on features like the Sniffer. The new filters are awesome.


Cheers.

can you tell me how u do sniffer filter pls ,, as i facing issue that my PPP server its been attacked by cain program that its using MAC sniffer.


Regards

Any plans of implementing PPPv6 + PD also?