● Covered by 1 source · 1 reportMedium impact1 negative
Flawed Netgear Routers Flood University of Wisconsin Internet Time Server
Key points
- Netgear routers continuously sent SNTP requests to UW-Madison's time server.
- The flood caused a denial of service for the university's network.
- Netgear is working with UW-Madison and providing firmware updates.
- The issue persisted for months, requiring network mitigation strategies.
Initial Network Flood Detected
In May 2003, the University of Wisconsin-Madison's network experienced an unusual surge in inbound traffic, specifically directed at its Internet Time Server. Analysis revealed that the flood consisted of Simple Network Time Protocol (SNTP) requests originating from numerous Netgear routers. This sustained high volume of requests effectively created a denial of service condition for the university's network infrastructure.
Investigation and Vendor Engagement
The university's investigation traced the source of the requests to a flaw in the SNTP client implementation within certain Netgear router models. After identifying the issue, the University of Wisconsin contacted Netgear. Netgear acknowledged the problem and began cooperating with the university to understand the scope and develop a resolution. This collaboration included examining the flawed code and identifying affected product lines.
Impact and Resolution Efforts
The continuous flooding impacted the university's ability to provide reliable time services and consumed significant network resources. Netgear committed to providing code upgrades for the affected products to correct the SNTP client behavior. Meanwhile, the University of Wisconsin explored various network operational options, including implementing BGP-based anycast time services and attempting to suppress the erroneous requests, to mitigate the ongoing impact.
Broader Implications
This incident underscores the critical importance of robust firmware development and testing in consumer networking devices. A single flaw, when present in a large number of deployed devices, can lead to significant network disruptions for other entities. The event also prompted discussions within the internet community regarding best current practices for protocol standards and device behavior.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
A flaw in Netgear routers caused them to continuously flood the University of Wisconsin's Internet Time Server with Simple Network Time Protocol (SNTP) requests, leading to a denial of service. Netgear is cooperating with the university to resolve the issue and provide code upgrades for affected products. This incident highlights the potential for widespread network disruption from device firmware vulnerabilities.