Internet Connection Traffic In/Out

[Hokie-Dave]

I've got a question on the data that my internet connection status screen shows as well as the data that my Firewall is showing. I've got a desktop wired to a Netgear 624 Router with PC-Cillin running for the Virus checker and Firewall as well as Spam Blocker enabled, and a TiVo hooked up with a wireless connection (WEP encryption) to the Netgear 624 router. The connection has been flawless since this weeekend after I updated the driver for my built in NIC card (ASUS MB).

I'm seeing that data is being received and sent, even when I don't have any programs open accessing the internet, and the TiVo isn't calling home either at this time. Is it normal for the Internet Connection Status screen to show data being received and sent all the time, even when I'm not doing anything via the Internet? The same thing shows on my Internet Security screen in PC-Cillin. My internet logs don't show the computer allowing any sites at these times either.

Thanks,
dave

[mbossman2]

it depends...is it a large amount of data or just bits and bytes?

remember things like IM's, email clients as well as the O/S send out data packets pretty regularly so a bit of traffic is expected. If OTOH you are seeing megabits of data flowing out on a steady basis then you have another issue (probably spyware or malware).

if it'll make you feel better boot into safe mode and run all the spyware and virus checks...but my gut says that you are fine, you sound like you take your security seriously so it is unlikely something snuck in without your consent.

[Hokie-Dave]

Thanks Moose. It's like 5k bytes at a time going both ways. If it was a program like IM or the like, wouldn't my internet log show where it was actually going? Actually I guess not, I think my logger software is only capturing incoming sites/addresses. I'll look at it a bit closer tonight when I get home and rerun the virus / adware programs in safe mode just to be sure.

I really like the PC-Cillin software so far (I've only been using it for a week or two), but it doesn't have the one screen I really like that the Kiero Firewall has that shows you exactly what programs have inbound and outbound traffic at any given point (or at least I haven't found it yet).

dave

[Jomama]

AnalogX has a free packet sniffer called PacketMon. With it you can tell where to and from where packets are going plus other info. Check it out.