Windows 7 WLAN Transmits Continously

Acer Aspire timeline as5810tz-4657 note...
March 4, 2010 at 10:18:04
Specs: Windows 7
When I used Windows 95, 98, and even XP, I had network traffic -WHEN I WAS DOING SOMETHING!

I just bought a new Windows 7 notebook, and updated everything Microsoft wanted me to. I went through the authentication process, and Windows Update says they have no more for me at this time. Browser windows are closed, and minimal programs are installed at this point because I used "PC Decrapifier" to unload all of the worthless junk that manufacturers install on new PCs. So... why is there non-stop traffic over the wireless lan? The thing transmits CONSTANTLY. I really can not stand it, and if I can't get it slowed down to something reasonable, I will dump Windows 7, the latest and reputedly the greatest Microsoft OpSystem. After all of this time, isn't there a utility that plainly and simply says, "The PC is connected to these servers, doing this, click to see the actual data exchange, (or something similar).

Yes, I am paranoid, the list of snoopers is endless, and what do I have to hide? I want to hide everything - period!

edited by moderator: Post moved from Windows 7 Forum to Networking Forum

See More: Windows 7 WLAN Transmits Continously

Report •

March 4, 2010 at 12:03:35
Typically a network interface will transmit while nothing is going on. This is a simple "hello, I'm here and I'm working" type thing but it usually doesn't involve a steady flow of traffic.

You might want to download, install, and run wireshark . It's a packet sniffer and once you point it at your wireless interface you could then begin a capture and have a look at the data that's being transmitted. At the very least, it would help you figure out what the source of the data is which in turn might help you figure out how to turn it off.

Report •

March 6, 2010 at 12:56:55
Thank you for the quick reply. It is true that there is network overhead. I once had a laptop with a defective nic that sent identical ARP requests several times a second. I thought it was an ARP cache poisoning attempt, but it was a bad network card. I have used Wireshark occasionally for network analysis, but I never had great luck capturing wireless because the LAN is segmented and switched. I just ordered a network hub (not a switch) so I could "tap" the traffic routed to the wireless access point. It was difficult to find a "dumb" hub, but when UPS delivers it, I will experiment, and let you know what I find.

Report •

March 7, 2010 at 05:40:25
It was difficult to find a "dumb" hub, but when UPS delivers it, I will experiment, and let you know what I find.

No doubt it was difficult. Almost nobody makes those anymore. I have an 8 port hub sitting under my monitor to lift it up a few inches but that's all that thing has done in years.

I had meant for you to install wireshark on the wireless client. Your original post made it sound like the new unit was the problem, not the wireless network device (ie: router/access point).

Regardless, the wireless interface on the client will likely be receiving all that traffic so I'd start by looking there.

Report •

Related Solutions

May 15, 2010 at 12:35:43
I used Wireshark and found the traffic was related to UPnP, and mDNS. When I disabled those services, the exchanges decreased by 80%. The remainder were mostly ARP exchanges.

The curious part was multiple TCP connections from a company named "MarkMonitor" who "circumvented" the firewall using UPnP.

I think Microsoft has an Anti-Phishing service agreement with MarkMonitor.

The official company line is:
"MarkMonitor, Inc. provides enterprise brand protection solutions and services. The company’s products include Domain Management that enables enterprises to protect various components of its brands and business; Online Trademark Protection, which allows enterprises to protect against trademark abuses, traffic diversions, and brand defamation; and Online Channel Protection that helps companies to restrict the counterfeit, pirated, and gray market sales of their branded goods. "

I do not sell anything online, and I do not appreciate the attention I got from MarkMonitor. It is little more than Cyber-Stalking, and I suspect the company was more interested in what media files I have, and whether or not I host any of them. (I do not.)

Disabling the SSDP service in Windows has (so far) eliminated the unwanted TCP connections and has not caused any inconvenience that I have noticed yet.

Thanks again!

Report •

Ask Question