network usage

Sharpz · 11 Jan 2008 at 00:15

i currently have a problem where my computer will randomly start downloading and i have no idea what its downloading. i play a lot of online games and i notice it starts to "lag" i close everything down and check my network usage and its maxed out, no applications running, no odd processes running. is there anyway i can find out what my network is doing using 3rd party tools etc?

cheers

Craig321 · 11 Jan 2008 at 00:20

When it starts maxing out go to 'Start' > 'Run' and type in 'netstat -a -b' (all without the quotes of course).

Post what comes up here.

Sharpz · 11 Jan 2008 at 00:29

Argh bad timing, it seems to have sorted itself out now but it does happen frequently.

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:135 Jon-PC:0 LISTENING
RpcSs
[svchost.exe]
TCP 0.0.0.0:554 Jon-PC:0 LISTENING
[wmpnetwk.exe]
TCP 0.0.0.0:41952 Jon-PC:0 LISTENING
[MediaServer.exe]
TCP 0.0.0.0:49152 Jon-PC:0 LISTENING
[wininit.exe]
TCP 0.0.0.0:49153 Jon-PC:0 LISTENING
Eventlog
[svchost.exe]
TCP 0.0.0.0:49154 Jon-PC:0 LISTENING
nsi
[svchost.exe]
TCP 0.0.0.0:49155 Jon-PC:0 LISTENING
Schedule
[svchost.exe]
TCP 0.0.0.0:49156 Jon-PC:0 LISTENING
[lsass.exe]
TCP 0.0.0.0:49161 Jon-PC:0 LISTENING
[services.exe]
TCP 0.0.0.0:50021 Jon-PC:0 LISTENING
[services.exe]
TCP 127.0.0.1:12080 Jon-PC:0 LISTENING
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:57104 ESTABLISHED
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:57107 ESTABLISHED
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:57109 ESTABLISHED
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:57114 ESTABLISHED
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:57115 ESTABLISHED
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:57145 ESTABLISHED
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:57180 ESTABLISHED
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:57182 ESTABLISHED
[ashWebSv.exe]
TCP 127.0.0.1:50022 Jon-PC:0 LISTENING
[services.exe]
TCP 127.0.0.1:56934 Jon-PC:56935 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:56935 Jon-PC:56934 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:56936 Jon-PC:56937 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:56937 Jon-PC:56936 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:57104 Jon-PC:12080 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:57107 Jon-PC:12080 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:57109 Jon-PC:12080 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:57114 Jon-PC:12080 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:57115 Jon-PC:12080 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:57145 Jon-PC:12080 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:57180 Jon-PC:12080 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:57182 Jon-PC:12080 ESTABLISHED
[firefox.exe]
TCP 192.168.1.2:139 Jon-PC:0 LISTENING

Can not obtain ownership information

x: Windows Sockets initialization failed: 5
TCP 192.168.1.2:56467 by1msg3245809:msnp ESTABLISHED
[msnmsgr.exe]
TCP 192.168.1.2:57133 216.73.84.17:http TIME_WAIT
TCP 192.168.1.2:57158 img132:http CLOSE_WAIT
[ashWebSv.exe]
TCP 192.168.1.2:57166 72.37.213.251:http CLOSE_WAIT
[ashWebSv.exe]
TCP 192.168.1.2:57167 72.37.213.251:http CLOSE_WAIT
[ashWebSv.exe]
TCP 192.168.1.2:57172 reserved-70:http TIME_WAIT
TCP 192.168.1.2:57173 reserved-70:http TIME_WAIT

mejinks · 11 Jan 2008 at 15:53

Are you using a firewall such as zonealarm? If so, hit the big red stop button, it should tell you what tries to access the internet then.

Sharpz · 19 Jan 2008 at 00:05

seems to be happening again.

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:135 Jon-PC:0 LISTENING
RpcSs
[svchost.exe]
TCP 0.0.0.0:554 Jon-PC:0 LISTENING
[wmpnetwk.exe]
TCP 0.0.0.0:41952 Jon-PC:0 LISTENING
[MediaServer.exe]
TCP 0.0.0.0:49152 Jon-PC:0 LISTENING
[wininit.exe]
TCP 0.0.0.0:49153 Jon-PC:0 LISTENING
Eventlog
[svchost.exe]
TCP 0.0.0.0:49154 Jon-PC:0 LISTENING
nsi
[svchost.exe]
TCP 0.0.0.0:49155 Jon-PC:0 LISTENING
Schedule
[svchost.exe]
TCP 0.0.0.0:49156 Jon-PC:0 LISTENING
[lsass.exe]
TCP 0.0.0.0:49204 Jon-PC:0 LISTENING
[services.exe]
TCP 0.0.0.0:50021 Jon-PC:0 LISTENING
[services.exe]
TCP 127.0.0.1:12080 Jon-PC:0 LISTENING
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:55034 TIME_WAIT
TCP 127.0.0.1:12080 Jon-PC:55038 TIME_WAIT
TCP 127.0.0.1:12080 Jon-PC:55057 TIME_WAIT
TCP 127.0.0.1:12080 Jon-PC:55071 TIME_WAIT
TCP 127.0.0.1:12080 Jon-PC:55081 TIME_WAIT
TCP 127.0.0.1:12080 Jon-PC:55095 TIME_WAIT
TCP 127.0.0.1:12080 Jon-PC:55119 ESTABLISHED
[ashWebSv.exe]
TCP 127.0.0.1:50022 Jon-PC:0 LISTENING
[services.exe]
TCP 127.0.0.1:54963 Jon-PC:54964 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:54964 Jon-PC:54963 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:54966 Jon-PC:54967 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:54967 Jon-PC:54966 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:55119 Jon-PC:12080 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:55122 Jon-PC:12080 TIME_WAIT
TCP 192.168.1.2:139 Jon-PC:0 LISTENING

Can not obtain ownership information

x: Windows Sockets initialization failed: 5
TCP 192.168.1.2:54525 by1msg3175711:msnp ESTABLISHED
[msnmsgr.exe]
TCP 192.168.1.2:54940 74.125.10.33:http ESTABLISHED
[MediaServer.exe]
TCP 192.168.1.2:54971 static-fxfeeds:http TIME_WAIT
TCP 192.168.1.2:55010 208.65.153.238:http TIME_WAIT

i am not currently running a firewall.

Sharpz · 29 Jan 2008 at 00:13

still doing it guys. has anyone any ideas please? seems to be around the same time each time.

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:135 Jon-PC:0 LISTENING
RpcSs
[svchost.exe]
TCP 0.0.0.0:554 Jon-PC:0 LISTENING
[wmpnetwk.exe]
TCP 0.0.0.0:41952 Jon-PC:0 LISTENING
[MediaServer.exe]
TCP 0.0.0.0:49152 Jon-PC:0 LISTENING
[wininit.exe]
TCP 0.0.0.0:49153 Jon-PC:0 LISTENING
Eventlog
[svchost.exe]
TCP 0.0.0.0:49154 Jon-PC:0 LISTENING
nsi
[svchost.exe]
TCP 0.0.0.0:49155 Jon-PC:0 LISTENING
[lsass.exe]
TCP 0.0.0.0:49156 Jon-PC:0 LISTENING
Schedule
[svchost.exe]
TCP 0.0.0.0:49162 Jon-PC:0 LISTENING
[services.exe]
TCP 0.0.0.0:50021 Jon-PC:0 LISTENING
[services.exe]
TCP 127.0.0.1:12080 Jon-PC:0 LISTENING
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:56848 ESTABLISHED
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:56852 ESTABLISHED
[ashWebSv.exe]
TCP 127.0.0.1:12080 Jon-PC:56886 TIME_WAIT
TCP 127.0.0.1:50022 Jon-PC:0 LISTENING
[services.exe]
TCP 127.0.0.1:56844 Jon-PC:56845 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:56845 Jon-PC:56844 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:56846 Jon-PC:56847 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:56847 Jon-PC:56846 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:56848 Jon-PC:12080 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:56852 Jon-PC:12080 ESTABLISHED
[firefox.exe]
TCP 192.168.1.2:139 Jon-PC:0 LISTENING

Can not obtain ownership information

x: Windows Sockets initialization failed: 5

86JR · 29 Jan 2008 at 01:12

services.exe and ashWebSv.exe look like culprits to me.