• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Is firewall history dissapearing normal?

Hello all and thanks in advance for the help.

I am getting constant Ip6 ips showing up on my firewall security logs. I know this is said to be a normal process, but it happening as often as it does was alarming to me. Heres an example of what happens

8/7/2014 10:32:32 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).",Detected,No Action Required,Firewall - Network and Connections,
8/7/2014 10:32:32 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: fe80::83c:2efa:bbad:a66d%5).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:30:20 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:30:20 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: fe80::83c:2efa:bbad:a66d%5).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:29:18 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:29:17 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: fe80::83c:2efa:bbad:a66d%5).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:27:54 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:27:54 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: fe80::83c:2efa:bbad:a66d%5).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:26:51 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:26:51 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: fe80::83c:2efa:bbad:a66d%5).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:26:51 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: fe80::ffff:ffff:fffe%5).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:25:38 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: fe80::ffff:ffff:fffe%5).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:25:38 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:25:38 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: fe80::83c:2efa:bbad:a66d%5).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:24:35 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:24:35 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: fe80::83c:2efa:bbad:a66d%5).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:24:35 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: fe80::ffff:ffff:fffe%5).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:23:33 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: fe80::ffff:ffff:fffe%5).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:23:33 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: fe80::83c:2efa:bbad:a66d%5).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:23:33 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:22:31 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:22:31 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: fe80::83c:2efa:bbad:a66d%5).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:22:30 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: fe80::ffff:ffff:fffe%5).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:21:48 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: fe80::ffff:ffff:fffe%5).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:21:48 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:21:48 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: fe80::83c:2efa:bbad:a66d%5).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:20:45 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:20:45 AM,Info,"Protecting your connection to a newly detected network on adapter \"Teredo Tunneling Pseudo-Interface\" (IP address: fe80::83c:2efa:bbad:a66d%5).",Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:20:29 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: 2001::9d38:6abd:83c:2efa:bbad:a66d).,Detected,No Action Required,Firewall - Network and Connections,,,
8/7/2014 10:20:29 AM,Info,IP address has disappeared from adapter Teredo Tunneling Pseudo-Interface (IP address: fe80::83c:2efa:bbad:a66d%5).,Detected,No Action Required,Firewall - Network and Connections,,,

All throughout the day and multiple times a minute seems to be suspicious. to me. Now, when i emailed comcast about this, all of a sudden the firewall logs dissapeared. And now the logs dissapear everyday, sometimes twice a day as if they are being deleted. All other logs remain but the firewall connections log. Is this some self truncation of logs that Norton does or am I being hacked/monitored, disguising the ip through ip6? I have had a history with a someone in the past who was able to get into my facebook, so no this would not be random.

Replies

Kudos2 Stats

Re: Is firewall history dissapearing normal?

Hi burningxspirit,
Welcome to Norton Community.
Since Teredo Tunneling Pseudo-Interface is a technology used to handle the ipv6 and its conversion, I feel its normal.
For more info, visit :
http://technet.microsoft.com/en-us/network/cc917486.aspx
Similar doubts were asked in past:
http://community.norton.com/t5/Norton-Internet-Security-Norton/Teredo-Tunneling-Pseudo-Interface-problem/td-p/212670

http://community.norton.com/t5/Norton-Internet-Security-Norton/Teredo-Tunneling-pseduo-Interface/td-p/836562
...
The Teredo adapters are virtual and cannot be seen in network adapters list.
To view such virtual adapters,
Open start-> run -> type 'cmd' without quotes-> press enter-> type 'ipconfig /all' without quotes and press enter.
This will list all network adapters on your system.
The main usages of there adapters are to provide compactablity in ipv6 to ipv4, network analysis, bridging, virtual routing like enabling hotspots via wifi, firewalls etc.
There virtual adapters [ Teredo Tunneling Pseudo-Interface ] is usually created by network management tools, firewall and security software, network drivers and related applications, vpn, development tools etc.
.....

Hacking into your facebook doesnt indicate that a hacker has access to your system and can manipulate it in all cases.
Logs in Norton gets overriden in the order oldest the first to go, if the logs exceed certain amount of pages.
Do you see your today morning logs disappearing by evening?
Have you used the 'recent history' option to view the logs?

Hope this eases your mind...:)
regards, CV | There is no ONE TOUCH KEY to security . Be alert and vigilant. . | Always have a Backup Plan!
Kudos2 Stats

Re: Is firewall history dissapearing normal?

Have you restarted your computer lately? The constant reconnection to the 'network adapter' could be a result of the garbage that gets collected on a Windows system.

If the restart does not help, another suggestion would be to go into your Device Manager and delete your network adapter, then restart your computer and let Windows reinstall the drivers.

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: Is firewall history dissapearing normal?

Nikhil_CV

Thanks for the reply. But is it normal for it to be happening that often? I forgot about ipconfig, I ran that and my ipv6 address thats listed there is not among the ones that are appearing and dissapearing multiple times a minute. My full logs are only 19 pages long, and its only the firewall logs that disssapear. I have quick scan results on there dating back to february! And  yes, i do see the firewall logs from today dissapearing because thats whats been happening ever since i started investigating it. I guess theres a chance they were dissapearing before that but thats the point i noticed. This person i know has connections to people thats how my fb got hacked (done so well that theres no ip traces, and it completely bypassed all thier login protection), so if the scenario i fear is actually happening right now i believe that my cable line was spliced or it could be done through my wifi  or something.

Kudos0

Re: Is firewall history dissapearing normal?

I restart my computer everyday, and the pinging begins as soon as my computer turns on. Ill try reinstalling my network adapter.

Kudos0

Re: Is firewall history dissapearing normal?

I reinstalled the network driver and so im not having the problem. ill post again if it happens. thanks for help you guys

Kudos0

Re: Is firewall history dissapearing normal?

well and there we have it, my firewall logs are gone again

Accepted Solution
Kudos2 Stats

Re: Is firewall history dissapearing normal?

HI all,

Are these entries to be displayed in History - Section (Firewall - Network & Connections)!?, If so, it's normal that they are deleted daily and/or each time the computer is started. It would seem that this section is cleaned up by design.

We discussed about this matter on this old Topic:

http://community.norton.com/t5/Norton-Internet-Security-Norton/Question-about-NIS-2014-History/m-p/1020835#M244794

If not, disregard my message.

Sandro

Sandro
Kudos0

Re: Is firewall history dissapearing normal?

thanks for the help good sir that is relieving!

Kudos1 Stats

Re: Is firewall history dissapearing normal?

Hi burningxspirit,

You are always welcome!

I'm glad that your question has been solved, as well as for my brain that still remembers the old things

Sandro

This thread is closed from further comment. Please visit the forum to start a new thread.