ASUS - ZenTalk

eigendude · 08-02-2026

SummaryThe RT-BE96U intermittently terminates active SMB connections to an NVIDIA Shield by generating TCP RST packets inside the router.EnvironmentRouter: ASUS RT-BE96USMB server: wired Linux system, 192.168.0.10Client: NVIDIA Shield over Wi-Fi, 192...

eigendude · 07-22-2026

Router: ASUS RT-BE96UFirmware: 3.0.0.6.102_39262Host: Apple Silicon MacBook running Parallels DesktopHost IPv4 address: 192.168.0.138Parallels VMs using Bridged Network → Wi-Fi cannot obtain DHCP leases from the RT-BE96U.This reproduces with both Ubu...

eigendude · 08-07-2026

OK, I submitted the following:Short version: Flow tracking during heavy SMB traffic looses the netfilter midstream connection tracking, rebuilds a temporary ESTABLISHED connection, and a downstream ASUS/Broadcom component mishandles the rebuilt conne...

eigendude · 08-07-2026

Great, thanks for the heads up about the new FW version. I applied it, played a movie on my Shield, and it stopped 3 mins in. So no fix for the spoofing issue.Good news, the Kodi fix I made is working great. I'm a little nervous running a router that...

eigendude · 08-06-2026

I've created two workarounds to the "mishandling Netfilter connection-tracking TCP loose mode" bug.First, I'm a Kodi developer, so I simply patched Kodi to handle TCP resets at the samba dependency layer: https://github.com/xbmc/xbmc/pull/28829. Kodi...

eigendude · 08-06-2026

The failure path appears to be this:The Shield requests SMB data over Wi-Fi.The router receives that traffic on `wl1.1` and forwards it through `br0` to the wired SMB server.The SMB server replies normally.At some point, the router loses the original...

eigendude · 08-06-2026

So this does appear to be a firmware defect. The evidence points to the firmware losing the SMB flow’s tracking state, then mishandling the reconstructed connection and generating a reset.This is a normal LAN-to-Wi-Fi connection through br0 and wl1.1...

ASUS - ZenTalk

User Statistics

User Activity

RT-BE96U injects spoofed TCP RST packets into SMB connections

RT-BE96U DHCP ignores Option 61 and offers host IP to bridged VMs

Re: RT-BE96U injects spoofed TCP RST packets into SMB connections

Re: RT-BE96U injects spoofed TCP RST packets into SMB connections

Re: RT-BE96U injects spoofed TCP RST packets into SMB connections

Re: RT-BE96U injects spoofed TCP RST packets into SMB connections

Re: RT-BE96U injects spoofed TCP RST packets into SMB connections