does NAD use network by itself?

Author Message
emanuele 12/05/2004 06:52 pm

My W2000 has a strange network load and I suspect it depends on NAD since there are no other tasks using the network. I also have a firewall so I`m quite sure there are no other connections. netsstat returns the follwoing info:

Connessioni attive

Proto Indirizzo locale Indirizzo remoto Stato
TCP pianello:http pianello:0 LISTENING
TCP pianello:epmap pianello:0 LISTENING
TCP pianello:microsoft-ds pianello:0 LISTENING
TCP pianello:1025 pianello:0 LISTENING
TCP pianello:1032 pianello:0 LISTENING
TCP pianello:1210 pianello:0 LISTENING
TCP pianello:3539 pianello:0 LISTENING
TCP pianello:36178 pianello:0 LISTENING
TCP pianello:netbios-ssn pianello:0 LISTENING
TCP pianello:1210 10.0.0.2:http SYN_SENT
TCP pianello:3539 pianello:4748 TIME_WAIT
TCP pianello:3539 pianello:4759 TIME_WAIT
TCP pianello:3539 pianello:4774 TIME_WAIT
TCP pianello:3539 pianello:4814 TIME_WAIT
TCP pianello:3539 pianello:4886 TIME_WAIT
UDP pianello:microsoft-ds *:*
UDP pianello:netbios-ns *:*
UDP pianello:netbios-dgm *:*
UDP pianello:2828 *:*
UDP pianello:3702 *:*

where, of course, pianello is my computer. port 3539 is quite suspect

In the above conditions NAD diagram window shows a pulsing net usage with an outgoing peak of about 100 Kb and a "frequency"of about 2 sec. The outgoing diagram ha the same shape but the max value of about 15 Kb

I did unistall the "NAD proto deriver" from my network interface (BTW do I need to reinstall it? and how?)

Is it possible the above traffic being "virtual" due to NAD activity ?

Thank you very much from Italy,
Emanuele

Alexander 12/06/2004 03:01 am
Dear Emanuele,

Thank you for writing us.

> My W2000 has a strange network load and I suspect it depends on NAD since there are no
> other tasks using the network.

As I can see, you have running several services/tasks which are using network. For example, you have web server started at the 80 (http) port number...

> I also have a firewall so I`m quite sure there are no other
> connections. netsstat returns the follwoing info:

It is very easy to check - uninstall NAD, reboot your system and run NETSTAT command again.

> Connessioni attive
>
> Proto Indirizzo locale Indirizzo remoto Stato
> TCP pianello:http pianello:0 LISTENING
> TCP pianello:epmap pianello:0 LISTENING
> TCP pianello:microsoft-ds pianello:0 LISTENING
> TCP pianello:1025 pianello:0 LISTENING
> TCP pianello:1032 pianello:0 LISTENING
> TCP pianello:1210 pianello:0 LISTENING
> TCP pianello:3539 pianello:0 LISTENING
> TCP pianello:36178 pianello:0 LISTENING
> TCP pianello:netbios-ssn pianello:0 LISTENING
> TCP pianello:1210 10.0.0.2:http SYN_SENT
> TCP pianello:3539 pianello:4748 TIME_WAIT
> TCP pianello:3539 pianello:4759 TIME_WAIT
> TCP pianello:3539 pianello:4774 TIME_WAIT
> TCP pianello:3539 pianello:4814 TIME_WAIT
> TCP pianello:3539 pianello:4886 TIME_WAIT
> UDP pianello:microsoft-ds *:*
> UDP pianello:netbios-ns *:*
> UDP pianello:netbios-dgm *:*
> UDP pianello:2828 *:*
> UDP pianello:3702 *:*
>
> where, of course, pianello is my computer. port 3539 is quite suspect

According to http://www.iana.org/assignments/port-numbers this port number is assigned to IBM Directory Server SSL.
?

> In the above conditions NAD diagram window shows a pulsing net usage with an outgoing peak
> of about 100 Kb and a "frequency"of about 2 sec. The outgoing diagram ha the same shape but
> the max value of about 15 Kb
>
> I did unistall the "NAD proto deriver" from my network interface (BTW do I need to reinstall it?
> and how?)

You need to re-install NAD over the existing copy to repair NAD driver.

> Is it possible the above traffic being "virtual" due to NAD activity ?

The only case of NAD network activity is DNS requests when the Active Connections window is opened. NAD does this to determine the domain names for established connections.

Best regards,
Alexander Bednyakov
MP Staff