BetaONE will rise again!

BetaONE will rise again! (http:\\b1.hcanet.com\forum/index.php)
-   Software Support (http:\\b1.hcanet.com\forum/forumdisplay.php?f=45)
-   -   connection active for no reason (http:\\b1.hcanet.com\forum/showthread.php?t=7748)

gus 26th Apr 03 03:55 PM

well.. im having problems with my connection, its reall freaking active for now reason, uploading at 10kB/s and downloading at 8kB/s.. i used a packet sniffer and this is the result i got

http://www.holics.net/gus/result.html
http://www.holics.net/gus/result.txt


i have a router on my LAN setup, its a NetGear MR814

ps

that info was gotten after only 9 secs of packet snnifing

hope you can help me :unsure: :unsure:

JacKDynne 26th Apr 03 06:12 PM

Gus,

Looks like your .2 machine is trying to connect to your .1 machine from a variety of different ports to some kind of web interface; maybe for a sql database of some sort? I am not totally sure :o

I would not be too alarmed - looks like it's just restricted to your internal ip's - I did not see anything shooting out; all that action (it's like a packetstorm) will degrade the performance of your nic so the dl/upl speeds will suffer.

Take a look at what's running on the .2 box, that may provide some more clues ;)

Hope this helps some and someone please correct me if I am wrong :)

/me promises to stop by #holics more often ;)

/JD

DoG 26th Apr 03 06:15 PM

Just wondering what the private ip for your router is? 192.168.0.1 by any chance? If so then those packet could indeed by outwards bound :(

JacKDynne 26th Apr 03 06:22 PM

Doh! I forgot about that - yeah Gus, uh, erm....well.... :wacko:

gus 26th Apr 03 07:25 PM

192.168.0.1 is my router
192.168.0.2 is my pain PC

i tried stoping all the processes running, nothing happend, i stoped some services, nothing happend either... im shoked at this, not even Zone's GIGANTIC brain was able to help me :( :unsure: :cry: :crybaby:

Sephiroth 26th Apr 03 08:07 PM

gus, download this:

http://www.sysinternals.com/ntw2k/source/tcpview.shtml

you should at least be able to figure out what's causing all the flood of traffic with that...

gus 26th Apr 03 08:14 PM

thank Homoroth... err i mean Seņor Sephiroth :unsure: :rolleyes: :D :P

i will try it ..... NOW

gus 26th Apr 03 09:02 PM

ok, this are the results:

http://www.holics.net/gus/tcpview.txt

:blink: :unsure: :( :angry:

DoG 26th Apr 03 09:13 PM

Code:

<non-existent>:240 TCP        gusdesk:1386        192.168.0.1:http        CLOSING       
<non-existent>:2536        TCP        gusdesk:1199        gusdesk:0        LISTENING

/Me wonders wtf this is?

gus 26th Apr 03 09:32 PM

yeah, i was wondering the same thing..... its really weird


All times are GMT +1. The time now is 10:13 AM.

Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.