On 13 Apr 2005 at 21:09, James David Byrne wrote:

> TCPView (download it from a Google search site) may let you see what 
> connection is being created & where it's started from. Worth a shot..
> 
> ----- Original Message ----- 
> From: "Bernie Cosell" <[EMAIL PROTECTED]>
> 
> > I'm trying to get the idle-disconnect to work on my RAS connection and
> > I've discovered that something is more-or-less constantly 'poking' the
> > internet 

Interesting, and much easier to understand than TDIview.  I found that 
there was only one active TCP or UDP connection, and it was a pretty 
mysterious one:

svchost.exe:844 TCP     fantasy-bernie:2369     208.172.158.220:http    
ESTABLISHED     

I have no idea what that is... strange site: doesn't have an rDNS.

BUT: I managed to figure out what it was: it was *windows*update*.  It 
was slowly doing its "background" download of an update... so I just 
updated the stuff myself and:
  1) it appears that the rogue network activity has stopped, and
  2) that mysterious HTTP connection is gone.

  /Bernie\

-- 
Bernie Cosell                     Fantasy Farm Fibers
mailto:[EMAIL PROTECTED]     Pearisburg, VA
    -->  Too many people, too few sheep  <--       

--
                ----------------------------------------
The WIN-HOME list is hosted on a Windows 2000(TM) machine running L-Soft
international's LISTSERV(R) software.  To unsubscribe, write to
[EMAIL PROTECTED]   If you have questions
about the list, write to [EMAIL PROTECTED]

Reply via email to