Problem with network activity module on ESS 5?

[poluxbgames]

Hello everyone,
i've noticed a little thing on the network activity module:



It seems to be always trafic... but:



no connection active...?!? Is it normal?
I've tried to disconnect the modem box of the network totally and it's always the same, like picture 1.

i've made a full scan without find infection, and malwarebytes AM doesn't find anything too...

so? what's this activity?
(perhaps CPL Plug for TV? But tv is not on now).

Thanks in advance.

[xxJackxx]

Not just you, seeing this as well.

[poluxbgames]

you see the same on your connection?

[toxinon12345]

Maybe local connections inside your computer.

[poluxbgames]

@xxJackxx
you see same kind of activity on your tab?

@toxinon12345
perhaps, but i can't see anything... is it dangerous you think?

[xxJackxx]

Originally Posted by poluxbgames

you see the same on your connection?

Yep, though I am not bothered by it or worried about it. Turning off my wireless connection stops it so it doesn't appear to be connections within the computer. You will notice that the scale is very small though, so even though it looks like a lot of activity you can see by the graph that in real numbers it doesn't amount to much.

-Also, the reason you are not likely seeing it on the Network Connections section is probably because the default is TCP connections only. If you uncheck that in the options to show UDP activity there is actually quite a bit going on.

[poluxbgames]

Thanks! i've enabled UDP activity and it seems that it's svchost.exe who send and receive some kb very often.
Distant adress:ff02::c:1900
Normal you think?
it seems to be win 7 who discover other computers and devices on the local network.. it is possible?

[poluxbgames]

I've found the solution
i've disabled 2 services:"UPnP Device host" and "SSDP Discovery service"
and all the activity is gone

[poluxbgames]

Arg! I'm blocked... these two services are needed to make an Iphone connection with itunes...
so i must start them..
Perhaps these are searching connection permanently = network activity..?

[xxJackxx]

svchost.exe does generate a lot of traffic. You don't want to disable those services as you discovered. Basically what you are seeing is something that has been going on all along and it is nothing to be worried about.

If you want a second opinion you can go to the Sysinternals site and download TCPView (free) and it will show you pretty much the same activity you are seeing now. http://technet.microsoft.com/en-us/s...rnals/bb897437

If you are concerned that something rogue is going on I really don't think you have anything to worry about.

[poluxbgames]

Thanks a lot
i have made a mistake. I've no UPnP peripheral (iphone don't need it in fact) and these services are not necessary for me
so it turns perfectly now without and the network activity is fine now
svchost (UPnP & SSDP discovering) try to discover each second a peripheral in fact