If you own a Netgear router, Annie Stunden would like you to stop pinging her network.

The University of Wisconsin, Madison's CIO says that a software glitch in some Netgear products has the routers bombarding the school's publicly accessible Network Time Protocol (NTP) server to update network time and date. Such data is important for routers, because they generate a variety of time-sensitive logs.

Several versions of Netgear's consumer routers - models RP614, DG814, MR814 and HR314 - were shipped with code that has the devices pinging UW's NTP server to set their internal clocks. The pinging can be triggered when the router goes offline, is unplugged or is reset, usually without the knowledge of the product's owner. If the NTP is unavailable, the router will continue pinging the device until it answers.

As a large public institution, the university is used to seeing its share of hacker activity, Napster-like file swapping, and other bandwidth abuses from outside and within. But in May, UW network staff noticed an unusual amount of traffic hitting its NTP server, which it runs as a public service over the Internet, as do many other institutions with a large Internet presence.

"It was sort of a complex situation," Stunden says. "We found a lot of network traffic coming in a couple of months ago, looking like a denial-of-service attack on our network. We said, 'what's banging at us,' and when we looked into it, we found it was a very specific kind of traffic, coming from a specific kind of Netgear router."

One solution might have been to take the NTP server offline, or move it to another IP address, Stunden says, but the Netgear routers were pinging a whole sub-range of addresses. "It would not have done any good," she says. "Those Netgear routers would still come here. The only other solution would be to shut down a whole Class A address that we use, and that's not practical."

The method of programming routers to ping public NTP servers to set their clock time is common in the industry, says Leslie Adams, vice president of marketing for Netgear. Most NTP implementations on routers ping multiple sites in a random order.

"It's just a matter of making sure your products don't ping the same server all the time," Adams says. She doesn't know why Wisconsin's NTP server IP address was programmed into the affected routers. The products were developed by Netgear engineers and some OEM partners.

Whitepapers

• Best Practices for HP Servers and HP Enterprise Virtual Array in a Microsoft Exchange
• Compliance, Protection, Recovery: A Layered Approach to Laptop Security
• Endpoint Security: Data Protection for IT, Freedom for Laptop Users
• IT Departments on Data Security: A Research Concepts Survey
• Laptop Security Tool Helps Allina Hospitals Track 97% of IT Assets
• The Case for an Untethered Enterprise

View more WIRELESS & MOBILE whitepapers

Webcasts

• Key Considerations for a Successful 802.11n Deployment
• The High-Touch Remote Helpdesk: Centralized Support for the Decentralized Organization
• From Wired to Wireless with Confidence - On Demand
• High Availability for SQL Server 2005 Using Array-Based Replication and Host-Based Mirroring Technologies
• Technical Overview of Exchange Server 2007 with HP Servers and Storage
• Bringing Order and Security to your Mobile Workforce: Corporate Mobility Policy and Device Management On-Demand

View more WIRELESS & MOBILE webcasts

Special Reports

• Learn how to Keep your Mobile Workforce Connected
• The Wireless Explosion

View more WIRELESS & MOBILE special reports