Can someone help me please.

I've started using syslog to view the activity on my 2850vn router.

Under the tab 'user access' I was expecting to see when someone logged onto the router and not a lot more.

Couldn't have been more wrong, entries are being added at the rate of about 1 a second!

Can't find a manual to tell me what I'm seeing but entries from remote ip's to local ip's and vice versa.

Can someone help me decode?

Also, when I look at the 'wan' tab approximately every two minutes I see and entry DSL: DSL Rebooting... Is this normal?

Thanks in advance