Router activity question

[Jack Hannibal]

Hi everybody,

A question for you. I have a Linksys BEFSR41 router connected to my Linksys cable modem. With no internet activity, the activity LEDs on both units are constantly flashing. Any thoughts as to why. I ran a speed test at dslreports and didn't notice any bandwidth impact. I an getting 1440 out of my expected 1500 bandwidth. This has been occurring for the last week or so.

The machine connected in an XP Home box with all the latest updates. NAV also did not locate any virii on the box. A review of the processes running also did not turn up anything unusual. What is really odd to me is the cable LED on the cable modem is not flashing. I would have thought this LED would be blinking constantly if I were getting pinged. Any thoughts as to why the router and cable modem are communicating so frequently?

Thanks

[meese]

Put WallWatcher on your pc and you will find out why:

www.wallwatcher.com

Compliments go to GroundZero3

The internet is a nasty place.

[Jack Hannibal]

After having run wallwatcher for thirty minutes, the only internet activity logged is exactly as I expected. The only logged information was for techimo and reseller ratings. These were the only sites I was on. Is there perhaps a communications frequency setting in Zonealarm or on the router itself that may cause this activity. I did see I had the Zonealarm Pro security settings set to more secure. Would that cause the increase in activity? I did change that setting but the amount of activity remains high. Any thoughts as to how to proceed? Thanks

[stroyal]

Just checked my router and modum. Both still flash while the only computer running is unplugged from my network. Motorola and D-Link DFE-530TX+

[meese]

I have a work domain and a home domain using W2K Domain controllers. You should see all the incoming traffic that gets blocked by the router.

[Jgedeon]

Even though you computer may not be online your router is. There's alwas some activity going on on the internet. right now things are really high with Blaster still being active out there.

First attachment is the normal firewall log. The second is the IDS log and 99% of it is from MS Blaster. Maybe now you will understand why the light blinks so much.

Give me sometime and I will get them seems they won't let us upload a text file here.

EDIT: This is the firewall log.

Firewall log
Date: 10 September

00:37:46 input - eth2 PROTO=6 62.49.40.122:3774 65.25.921.00:80 L=44 S=0x00 I=3694 F=0x4000 T=110 SYN (#18)
02:54:50 input - eth2 PROTO=6 211.147.14.89:3379 65.25.921.00:80 L=44 S=0x00 I=45072 F=0x4000 T=34 SYN (#18)
02:54:53 input - eth2 PROTO=6 211.147.14.89:3379 65.25.921.00:80 L=44 S=0x00 I=45709 F=0x4000 T=34 SYN (#18)
02:54:59 input - eth2 PROTO=6 211.147.14.89:3379 65.25.921.00:80 L=44 S=0x00 I=46917 F=0x4000 T=34 SYN (#18)
04:07:28 input - eth2 PROTO=6 132.211.1.191:3608 65.25.921.00:554 L=48 S=0x00 I=28160 F=0x4000 T=105 SYN (#18)
04:07:31 input - eth2 PROTO=6 132.211.1.191:3608 65.25.921.00:554 L=48 S=0x00 I=28758 F=0x4000 T=105 SYN (#18)

Dratz can't put the IDS log on here too. Makes the message too long by some 400000 characters.

moved to networking

[Jgedeon]

Jack,
The IDS log is way to long to post in a message. If you want to see it message me and I will email it to you in a text or doc file.

[Jack Hannibal]

Thank you all for the replys.

Jgedeon - It is not necessary to send the log. My bigger concern was just ensuring my PCs security.

Like I said, it does not appear to be impacting my internet bandwidth. It was just the continuously flashing modem and router lights got my attention. I will take the steps both you and meese suggested. Thank you


Update:
I had discussed my activity observation with Comcast. They indicated the increased activity is solely due to Comcast upgrade work mentioned by OuTpaTienT in this thread ->http://www.techimo.com/forum/t79645.html

Thank you all again