Strange entries in System Log of Centro Piccolo

[georg]

Hello,  I have noticed since quite some time some strange entries in the System Log of my Centro Piccolo.

 
I have an enormous amount of one line entries all saying
"09.08.2015 16:34:32 L1 sdb nm_ipv6_add_firewall: <sit1> (4)"

Sometimes this is logged 8-9 times every second!! See example below.
I wonder if this is affecting the speed at which I can see web pages, which I noticed recently seems to have slowed down.

Apart from any possible performance effect, this is annoying as all more meaningful messages are flooded by these.

Anybody knows what this is about and what could possibly do to resolve?

Thanks in advance!

09.08.2015 16:34:51 L5 lua_webui web login success for user: admin 
09.08.2015 16:34:33 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:34:32 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:34:32 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:33:45 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:32:46 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:32:32 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:32:32 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:31:45 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:31:44 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:30:57 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:30:56 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:30:45 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:30:45 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:30:34 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:30:34 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:30:33 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:30:33 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:29:27 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:28:36 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:28:32 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:28:26 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:28:19 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:27:45 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:26:58 L3 dnsmasq nameserver '195.186.1.162' is now responding
09.08.2015 16:26:33 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:26:33 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:25:56 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:25:52 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:24:57 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:24:45 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:24:45 L1 sdb nm_ipv6_add_firewall: <sit1> (4)
09.08.2015 16:24:33 L1 sdb nm_ipv6_add_firewall: <sit1> (4)

[MatthiasM]

Dear Georg

We have forwarded your concern to our specialists. They will contact you as soon as possible. 

Kind regards

MatthiasM

Swisscom

[Philmen]

Hi.

I do have the same log entry. Thanks to keep me updated as well.

Regards

Philippe

[georg]

I have been trying to get in touch with the technical experts for a while.  They tried to call me twice, but hang up pretty quickly, so we missed each other.  I called back 0800 800 800 at least 3-4 times but failed to be connected with the expert.

All I got is a voice mail that told me "I should not worry" whichj I do not find satisfactory as an answer.

I will try to contact 0800 800 800 again and report back what I learn.

[georg · Accepted solution]

I finally got a proper answer today. 

Fisrt of all many thanks to the Customer Service person who I got on the phone today, who accepted that a Customer may be in fact also knowledgeable on IT (he actually asked me the question, if I was an IT expert, and accepted the answer, God bless him!)  So he got the proper answer from Techical expert and reported back to me.

In a few words here is what is going on: I have (and I suspect the other users who also was interested) several devices on my home LAN that have IPv6.  For examples Swisscom TV box, a new HP ALl-in-1 Printer, and several iPhones and iPad. 

IPv6 does not need the NAT (Netwok Address Translation) feature of the router/firewall, because same IPv6 address can be used on LAN and WAN of course.  However to protect the LAN, the firewal adds a 'special rule' on-the-fly for every IPv6 request, which are not neeed for the normal IPv4/NAT operations as the protecton rule is embedded in normal NAT mode.

Et voilà, nothing to worry now that we have a proper explanation.

[tallrob]

Still, I think unchecked errors filling up logs is lazy and sloppy on developers' part, if for no other reason than making it difficult to troubleshoot other problems.