Skip to main content

NIC Sent Packets keeps increasing

More
16 years 8 months ago #25672 by derk
Good day everybody!!

A week ago I noticed that the Sent Bytes from my PC was increasing. I've tried to disable and enable the NIC again but to no avail. I've tried to disable all Windows services pertaining to networking and routing but still it has some 67,450,455 bytes Sent eventhough I'm not seeding any torrent. I've also uninstalled my BitTorrent thinking that it's the one causing the problem but still.

In short, I've tried almost everything. I can't site any affect it had on my system but I think it's not usual. Then I decided to backup my files and go for the reformat.. After re-installing XP and my NIC driver, I've open the Network Status to see if it comes back to normal --- but the problem is still there ... the SENT Bytes is around 67,000,000 even without any browser opened or torrent seeding..

I quite confused now how anything like this would happen after reformat. Please help.....
More
16 years 8 months ago #25677 by sp1k3tou
Have you tried a virus scan? Also your NIC might be on the way out.
More
16 years 8 months ago #25684 by derk
Virus scan? yes, I have 2 anti-virus installed on my pc -- avira and avg. And they're updated almost everyday. Plus, I have an AVG Anti-spyware installed (also updated) but nothing was detected. I have also my TuneUp utilities which can detect registry errors, but every error was fixed after every registry scan.

Whats do you mean by -- NIC out of the way??

Thanks and please
More
16 years 8 months ago #25686 by Smurf
Nic might be on the way out, not out of the way. i.e. may be going faulty.

Have you don a packet capture to see what the traffic is that its sending out. Windows machines will send out various types of traffic because its Windows, such as NetBIOS broadcast traffic, etc... but the amount you are talking about does sound quite interesting.

The best bet is to do a packet capture to see what the traffic is. Also you can do some netstat's to see what ports/sockets are in use. The netstat -na -b command will list all active/listening connections and also the .exe file that is responsible for that service port. You will probably see loads of svchost.exe ones because loads of Windows services will interact with that exe file.

Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
More
16 years 8 months ago #25688 by derk
Thanks for the replies..

I have not done packet capture yet but tomorrow I'll try wireshark and netstat. For today, I'll just do some readings about wireshark and netstat (how to interpret).

Can you suggest any packet capture tool that I can use? The one that I can interpret the results easily :)

Thanks again...
More
16 years 8 months ago #25689 by Smurf
Wireshark is the one i used also :)

Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Time to create page: 0.145 seconds