constant incoming data.

deadite66 · 08-02-2004, 06:48

looks like a constant 20kbits/sec started around 11pm friday and it still going on 6:30am sunday, the hour before that show the normal background chatter.

i still keep getting incoming connections from bittorrent (mandrake 10 beta2 ) though i finished downloading that a few days ago, could this be the reason?

nothing else is coming from my pc's connected to a linksys befsr41, so looks like the router is filtering what ever crud it is.

th'engineer · 08-02-2004, 09:56

hi deadlite you run spybot or adaware recently might be worth checking nowts come in as a trojan

Ignition · 08-02-2004, 10:34

It's most likely Address Resolution Protocol (ARP) spam, from a worm scanning looking for live IPs, nothing to worry about.
Actually I've just spoken to another user who is seeing this effect, he confirms for me that he's getting constant ARP spam, it's nothing to do with your setup

Stuartbe · 08-02-2004, 10:38

Quote:

Originally Posted by JustAnotherN00b

It's most likely Address Resolution Protocol (ARP) spam, from a worm scanning looking for live IPs, nothing to worry about.
Actually I've just spoken to another user who is seeing this effect, he confirms for me that he's getting constant ARP spam, it's nothing to do with your setup

Getting the same here in Luton... My Ethernet and D/S light are constantly flashing.....Perhaps there is a disco in my SCM and no one told me

JustAnotherN00b is correct... When I sniff the traffic on that interface I find that it is nothing but ARP junk..

deadite66 · 08-02-2004, 23:10

ok cheers all.
th'engineer i regualry use adaware, spybot s&d, avg and thecleaner so i knew it shouldn't be from me.
still annoying though even though ntl don't enforce the cap i like try to abide by it and the worm is adding to the downloaded pile.

how much would 20kbit/sec for 24 hours add up to?

Sociable · 08-02-2004, 23:21

Quote:

Originally Posted by deadite66

how much would 20kbit/sec for 24 hours add up to?

Very little compared to the "normal" traffic about 100MB if its actually steady at 20k but I expect its repeated bursts rather than constant anyway so far less than that even.

**Paul** · 09-02-2004, 02:30

Quote:

Originally Posted by Sociable

Very little compared to the "normal" traffic about 100MB if its actually steady at 20k but I expect its repeated bursts rather than constant anyway so far less than that even.

Time to get a new calculator Soc

20Kbps = 2.5K bytes/sec and 2.5 x 60 x 60 x 24 = 216000k (211MB).

However, if its ARP traffic then it won't count to your "cap" anyway - ARP's only exist on your local subnet.

Pyromanic · 09-02-2004, 22:05

Hi, I get this problem. How easy is it to change ip to get rid of the traffic ? I tried unpluging my cable modem for about a day after releasing the ip but I still get the same ip back again.

**Paul** · 09-02-2004, 22:22

What makes you think changing IP will help ? ARP traffic is a fact of life, you're just as likely to see the same sort of levels if you change IP (you will see it if you get another IP on the same subnet).

rdhw · 09-02-2004, 22:53

Quote:

Originally Posted by Pyromanic

Hi, I get this problem.

It shouldn't be a problem: what problem are you having?