system firing packets on a reg basis.

007 · 02-26-08, 11:57 AM

Hey all

I've got this weird problem with my WinXP Pro sp2 box.

I'm kinda semi clued up on some of the ins and outs of networking etc - but this has me stumped and I am far from an expert..

What it is is as follows.

Every 3/4 secs my system is sending sys/ack packets to my router.

I've captured the packets and they're basically straight forward handshake types that just get ignored for want of a better word.

Also when I bootup my pc - as soon as I've logged in I can jump straight on the Internet - no biggy right? however in my "network connections" folder - it only shows my "via RHINE fast ethernet adaptor" connection to my router.

So I surf and go on irc, msn, download stuff, play games etc - then all of a sudden for no apparent reason the "Your Internet connection is established" bubble pops up on the task bar to tell me Internet connection is now alive..
errr???

I already new it was alive cause i'd been surfing and online for an hour already.

This happens every time.

AND the weird syn/ack packets I was referring to - ONLY start AFTER that
"Your Internet connection is established" notice pops up.

They don't stop then till I reboot - and the scenario will play out all over again.

Anyone got any ideas? I know its a long shot - but thought I'd ask..

The constant packet activity after the ""Your Internet connection is established" pops up is really bugging me cause I cant trace whats sending them - it all falls down to svchost.exe being constantly active every couple of secs when the packets get fired.

Some APP or service or "something" is firing those packets every few secs once that "Your Internet connection is established" notice appears.

I'd love to know whats causing it.

?

007

PS -- inside the packets I see this...

<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><m:GetTotalPacketsSent xmlns:m="urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1"/></SOAP-ENV:Body></SOAP-ENV:Envelope>

El<(')>Maxi · 02-26-08, 12:55 PM

Most likely Windows Update which uses SOAP protocol, I don't know about the delay/alert.

skidooosl · 02-26-08, 01:20 PM

whats the dest ip address of the packets? it could be any number of things

Cheator · 02-27-08, 06:11 PM

Its most likely ARP, or NMB stuff. Thats normal for windows, and even Linux. As for the delayed alert, is it a wireless connection?

02-26-08, 11:57 AM	Thread Starter #1
007 Member Join Date: Feb 2004 Location: England Lancashire.	system firing packets on a reg basis. Hey all I've got this weird problem with my WinXP Pro sp2 box. I'm kinda semi clued up on some of the ins and outs of networking etc - but this has me stumped and I am far from an expert.. What it is is as follows. Every 3/4 secs my system is sending sys/ack packets to my router. I've captured the packets and they're basically straight forward handshake types that just get ignored for want of a better word. Also when I bootup my pc - as soon as I've logged in I can jump straight on the Internet - no biggy right? however in my "network connections" folder - it only shows my "via RHINE fast ethernet adaptor" connection to my router. So I surf and go on irc, msn, download stuff, play games etc - then all of a sudden for no apparent reason the "Your Internet connection is established" bubble pops up on the task bar to tell me Internet connection is now alive.. errr??? I already new it was alive cause i'd been surfing and online for an hour already. This happens every time. AND the weird syn/ack packets I was referring to - ONLY start AFTER that "Your Internet connection is established" notice pops up. They don't stop then till I reboot - and the scenario will play out all over again. Anyone got any ideas? I know its a long shot - but thought I'd ask.. The constant packet activity after the ""Your Internet connection is established" pops up is really bugging me cause I cant trace whats sending them - it all falls down to svchost.exe being constantly active every couple of secs when the packets get fired. Some APP or service or "something" is firing those packets every few secs once that "Your Internet connection is established" notice appears. I'd love to know whats causing it. ? 007 PS -- inside the packets I see this... <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><m:GetTotalPacketsSent xmlns:m="urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1"/></SOAP-ENV:Body></SOAP-ENV:Envelope>
	QUOTE Thanks

02-26-08, 12:55 PM	#2
El<(')>Maxi Blank Senior Member Join Date: May 2003 Location: Seattle	Most likely Windows Update which uses SOAP protocol, I don't know about the delay/alert. __________________ rdrash - 'I'm gonna intentionally try to kill this CPU with more volts'
	QUOTE Thanks

02-26-08, 01:20 PM	#3
skidooosl Member Join Date: Sep 2003 Location: MI	whats the dest ip address of the packets? it could be any number of things __________________ Abit NF7-S Rev 2 AMD 2500 Mobile 2 x 512mb Mushkin 222 Special Maze 4 GPU Eheim 1250, 89 Ford Van H/C 2 Ys-Tech 135CFM fans with custom shroud, critcool relay 2 120GB SATA Western Digital 7200 RPM 8MB Raid 0 Plexwriter Premium 52x32x52 8mb Gigabyte 6600GT Antec True Blue 480W power supply 4 (2 in 2 out) 120mm, 6 (2 in 4 out) 80mm 284cfm out 222cfm in all on high ( not usually on high ) Lain Li pc70 w/ heavy mods
	QUOTE Thanks

02-27-08, 06:11 PM	#4
Cheator Member Join Date: Apr 2004 Location: Ottawa, Canada	Its most likely ARP, or NMB stuff. Thats normal for windows, and even Linux. As for the delayed alert, is it a wireless connection? __________________ Optimus (Main): Antec P180, Asus P5Q-E, E8400, 4 GB G.Skill PC8000, ATI 4850, Seagate 320gb, Antec TrueControl II Teletraan I (htpc): Asus M2N-E, X2 4400+, 2 GB DDR2, ATI 3450, Sapphire Theatrix, 1.25TB storage, Antec SP2 400w Galvatron: Asus M2NPV-VM, 4200+ X2, 2GB DDR2, ATI 2900xt, Seasonic 500w Tracks: Acer AS5920, C2D 2.1ghz 45nm, 3GB DDR2, Nvidia 8600m GT, 250gb hdd Gears: Asus Eee PC 701, 1 GB DDR, Win XP My Heatware! "Duct tape is like The Force. It has a light side, a dark side and it holds the universe together." - Malpine Walis
	QUOTE Thanks

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

system firing packets on a reg basis.

Internet Services

Website Development

Tech Hardware