I'm running PE V1.7 on WinXP. PE sees a lot of traffic incoming on local UDP port 1900 (SSDP). Since PE was started a couple hours ago, it has logged 53,139 packets / 15,655,291 bytes received for that socket (at latest count). The remote addresses include various hosts around the country, some inside the address space of my ISP, and some in my personal LAN. My firewall log (WallWatcher) shows no traffic from those hosts. I enabled Socket Spy, against the socket then the process (svchost.exe), to see just what this traffic is. SS captures no traffic. The process or socket shows up in the Spy List. But nothing shows up in Packet Data. I checked out the hosts names / ip addresses shown by PE. They really do exist, and the names and addresses match. So PE isn't just making this up. WTH??