1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

What are "Mastiff" and "AAE Service" on asuswrt?

Discussion in 'ASUSWRT - Official' started by H.Z., May 19, 2019.

  1. H.Z.

    H.Z. Occasional Visitor

    Joined:
    Oct 26, 2017
    Messages:
    28
    I've found messages from "Mastiff" process and about AAE Service in my router's log.
    For example:
    May 19 15:42:11 192.168.1.1 rc_service: watchdog 242:notify_rc start_mastiff
    May 19 15:42:11 192.168.1.1 Tunnel: AAE Service is stopped
    May 19 15:42:11 192.168.1.1 Tunnel: AAE Service is stopped
    May 19 15:42:12 192.168.1.1 Tunnel: AAE Service is stopped
    May 19 15:42:12 192.168.1.1 AAE Service is started
    May 19 15:42:13 192.168.1.1 Mastiff: init

    What are these? Not the log entries, but the Mastiff, Tunnel processes and the AAE service.
    On Google I can't find them, just some post with a question, "is my router hacked?"...
     
  2. wouterv

    wouterv Very Senior Member

    Joined:
    Aug 4, 2013
    Messages:
    983
    Try Google again:
    "mastiff process"
    "tunnel aae service"
     
  3. H.Z.

    H.Z. Occasional Visitor

    Joined:
    Oct 26, 2017
    Messages:
    28
    I've tried it before asked. There is nothing, but logs and unrelated topics (like ANATOMY 35 Muscles List...)
    Could you give me some links what you found by google or other service?

    (I don't want to spamming here with many screenshots, but believe me, there are no relevant results on Google's first 3-4 pages, except the logs - I've tried it in Private Browsing mode too...)
     
    Last edited: May 19, 2019
  4. maxbraketorque

    maxbraketorque Very Senior Member

    Joined:
    Dec 6, 2015
    Messages:
    601
    Butterfly Bones likes this.
  5. Butterfly Bones

    Butterfly Bones Very Senior Member

    Joined:
    Apr 10, 2017
    Messages:
    802
    Location:
    USA
    I'm seeing those as well, but only once since updating my RT-SC86U to 384.11.2 from 384.11.1 (test build) yesterday.
    Code:
    May 19 09:17:54 RT-AC86U-4608 rc_service: watchdog 817:notify_rc start_mastiff
    May 19 09:17:54 RT-AC86U-4608 rc_service: waitting "stop_aae" via watchdog ...
    May 19 09:17:54 RT-AC86U-4608 NAT_Tunnel: AAE Service is stopped
    May 19 09:17:54 RT-AC86U-4608 NAT_Tunnel: AAE Service is stopped
    May 19 09:17:55 RT-AC86U-4608 custom_script: Running /jffs/scripts/service-event (args: start mastiff)
    May 19 09:17:55 RT-AC86U-4608 NAT_Tunnel: AAE Service is stopped
    May 19 09:17:55 RT-AC86U-4608 AAE: AAE Service is started
    May 19 09:17:55 RT-AC86U-4608 Mastiff: init
    
    I also find some other posts about AAE Service.

    https://www.snbforums.com/threads/p...in-384-5-early-test-builds.45769/#post-394704
    https://www.snbforums.com/threads/p...-5-early-test-builds.45769/page-7#post-397137

    I've not see replies to those. Like Mastiff and it being closed source as @maxbraketorque states above, I suspect AAE Service is also closed source, and nothing RMerlin can do about it. I grep searched my old syslog and found both of those get "init" and "is stopped" often in bootup before time is synched, but this is the first time for me to see them after the router is fully booted and all services and scripts running.
     
  6. fr33z0n3r

    fr33z0n3r Regular Contributor

    Joined:
    Feb 14, 2013
    Messages:
    59
    I've also started seeing these in the past day. there is a security update for my ac86u, so I'm doing that right now. it mentions ai vulnerability. no clue if it is related. will investigate more.
     
  7. maxbraketorque

    maxbraketorque Very Senior Member

    Joined:
    Dec 6, 2015
    Messages:
    601
    The two routers that are now showing this in the log both have the DDNS service enabled. I have a third router that does not have the DDNS service enabled, and the Mastiff Init log entry is not appearing.
     
  8. Gar

    Gar Senior Member

    Joined:
    Aug 26, 2018
    Messages:
    352
    Location:
    US
    Is AIProtect related? I turned it off last week and don't see those log entries.
     
  9. maxbraketorque

    maxbraketorque Very Senior Member

    Joined:
    Dec 6, 2015
    Messages:
    601
    I don't have it enabled.
     
  10. RMerlin

    RMerlin Super Moderator

    Joined:
    Apr 14, 2012
    Messages:
    30,384
    Location:
    Canada
    They are tied to IFTTT, AsusCloud (not to be confused with AiCloud), and possibly other Asus services.
     
  11. fr33z0n3r

    fr33z0n3r Regular Contributor

    Joined:
    Feb 14, 2013
    Messages:
    59
    I didn't have any of those enabled I don't think. This did cause me to migrate from ASUSWRT back to MerlinWRT to try and ensure any security issue was addressed, and could leverage your quick updates.

    Since I have syslog email alerts turned on for all higher severity events, I know for a fact it was the first time the event occurred since switching to ASUSWRT months ago (tried to solve unreliable connection issues). I wasn't merely seeing events that had been occurring for a while. I was doing nothing with the router - they just came in.
     
  12. maxbraketorque

    maxbraketorque Very Senior Member

    Joined:
    Dec 6, 2015
    Messages:
    601
    I've been running ASUSMerlin for the last several months. First time I've seen the Mastiff Init entry, so it appears to be happening in both flavors of firmware. I didn't see any entries for it this morning though, so perhaps its a one-time thing. Still suspect that the entries were triggered by something with the ASUS DDNS service.