well.. im having problems with my connection, its reall freaking active for now reason, uploading at 10kB/s and downloading at 8kB/s.. i used a packet sniffer and this is the result i got

http://www.holics.net/gus/result.html
http://www.holics.net/gus/result.txt


i have a router on my LAN setup, its a NetGear MR814

ps

that info was gotten after only 9 secs of packet snnifing

hope you can help me :unsure: :unsure:

Gus,

Looks like your .2 machine is trying to connect to your .1 machine from a variety of different ports to some kind of web interface; maybe for a sql database of some sort? I am not totally sure :o

I would not be too alarmed - looks like it's just restricted to your internal ip's - I did not see anything shooting out; all that action (it's like a packetstorm) will degrade the performance of your nic so the dl/upl speeds will suffer.

Take a look at what's running on the .2 box, that may provide some more clues ;)

Hope this helps some and someone please correct me if I am wrong :)

/me promises to stop by #holics more often ;)

/JD

Just wondering what the private ip for your router is? 192.168.0.1 by any chance? If so then those packet could indeed by outwards bound :(

Doh! I forgot about that - yeah Gus, uh, erm....well.... :wacko:

192.168.0.1 is my router
192.168.0.2 is my pain PC

i tried stoping all the processes running, nothing happend, i stoped some services, nothing happend either... im shoked at this, not even Zone's GIGANTIC brain was able to help me :( :unsure: :cry: :crybaby:

gus, download this:

http://www.sysinternals.com/ntw2k/source/tcpview.shtml

you should at least be able to figure out what's causing all the flood of traffic with that...

thank Homoroth... err i mean Señor Sephiroth :unsure: :rolleyes: :D :P

i will try it ..... NOW

ok, this are the results:

http://www.holics.net/gus/tcpview.txt

:blink: :unsure: :( :angry:

/Me wonders wtf this is?

yeah, i was wondering the same thing..... its really weird

weird..... beats the hell out of me

if you bring up a command prompt and run netstat , does it say anything there?

TCP gusdesk:1321 192.168.0.1:http CLOSING
TCP gusdesk:1394 192.168.0.1:http TIME_WAIT
TCP gusdesk:1545 192.168.0.1:http TIME_WAIT
TCP gusdesk:1696 192.168.0.1:http TIME_WAIT
TCP gusdesk:1750 gusdesk:0 LISTENING
TCP gusdesk:1750 192.168.0.1:http CLOSING
TCP gusdesk:1841 192.168.0.1:http TIME_WAIT
TCP gusdesk:1886 gusdesk:0 LISTENING
TCP gusdesk:1886 192.168.0.1:http CLOSING
TCP gusdesk:1987 192.168.0.1:http TIME_WAIT

Hmmm, basically it means theres a none-existant proccess on your computer making a none-existant connection to a non-existant service. I think your computer may be schitzophrenic. Your initial suggestion of a reformat might be a good idea....

* If you change your computers IP, do the connections persist?

* If you unplug your router from the network does it still attempt the connections?

* What happens in "safe mode with networking?"

* When did it first start happening? Did you change any network settings?

Have you checked for trojans and spyware? Just a thought

:angry: yeah, i updated NAV, ran it, nothing found... i ran ad-aware, deleted alot of stuff, traffic kept going... :blink: :(

Reformat- Its the only way to go :D
Will be dong it myself when i wake up in the morning (Or afternoon, depends when the blood warms up enough :P )