• Welcome to Tux Reports: Where Penguins Fly. We hope you find the topics varied, interesting, and worthy of your time. Please become a member and join in the discussions.

Event Viewer shows high TCPIP activity, is this normal?

T

Teflon

Flightless Bird
XP Pro, SP3.

System has been slowing down. of late, so I looked at the System log
in Event Viewer and saw Info entries for tcpip every 5 to 10 seconds.
All are the same, 'The system detected that network adapter \DEVICE
\TCPIP(lots of numbers) was connected to the network and has initiated
normal operation over the network adapter.'

Seems like an excessive amount of activity, but have no idea what it
means or if this is a normal amount of activity.

Is this normal? Could that be putting a drain on the system?
 
J

John Wunderlich

Flightless Bird
Teflon <spambaitmeister@gmail.com> wrote in
news:3728a4a9-5e5d-4f7f-bde9-6826a1519d3c@y14g2000yqm.googlegroups.co
m:

> XP Pro, SP3.
>
> System has been slowing down. of late, so I looked at the System
> log in Event Viewer and saw Info entries for tcpip every 5 to 10
> seconds. All are the same, 'The system detected that network
> adapter \DEVICE \TCPIP(lots of numbers) was connected to the
> network and has initiated normal operation over the network
> adapter.'
>
> Seems like an excessive amount of activity, but have no idea what
> it means or if this is a normal amount of activity.
>
> Is this normal? Could that be putting a drain on the system?
>


This isn't normal. You will probably get the same message if you
unplug and plug back in your ethernet cable. This is most likely a
hardware problem -- either a bad cable, connector, modem/router, or
NIC. If you have a long cable run, you might try dropping your
ethernet speed to 10 Mbps from 100 Mbps. The slower speed is more
tolerant to cable noise. You do this by double-clicking on your
network adapter under Device Manager (Start->Run->"devmgmt.msc") then
looking for a "Speed" setting under the "Advanced" tab. Try changing
it from "Auto" to "10/Full" and see if it improves.

HTH,
John
 
T

Teflon

Flightless Bird
On Apr 3, 2:09 pm, John Wunderlich <jwunderl...@lycos.com> wrote:

> This isn't normal.  You will probably get the same message if you
> unplug and plug back in your ethernet cable.  This is most likely a
> hardware problem -- either a bad cable, connector, modem/router, or
> NIC.  If you have a long cable run, you might try dropping your
> ethernet speed to 10 Mbps from 100 Mbps. The slower speed is more
> tolerant to cable noise.  You do this by double-clicking on your
> network adapter under Device Manager (Start->Run->"devmgmt.msc") then
> looking for a "Speed" setting under the "Advanced" tab.  Try changing
> it from "Auto" to "10/Full" and see if it improves.


Thanks for responding John. My internet connection is via wireless
(Intel Centrino in IBM laptop), connection manager is IBM's (Lenovo's)
ThinkVantage Connections app. Disconnected and the Event Viewer tcpip
Info messages stopped. Reconnected and the message every 5 seconds
routine started again. All TVC indicators say the connection is
strong and healthy. Any other ideas?
 
A

Animenia

Flightless Bird
Hi.

To determine wether the amount of activity in the log is normal or not
depends on your amount of softwares running that utilize the internet.

Every software you have installed on your system with an "automatic
update" feature will utilize your network connection and end up in the
log.

I would run a spyware/malware scan just to be certain tho.

Hitman pro is a free, good software using several different
spyware/malware and anti-virus softwares for as good a scan as
possible.
Depending on how much it finds the scan can take up to 10 hours.

You can download Hitman Pro from www.hitmanpro.nl/

/ Ani
 
J

John Wunderlich

Flightless Bird
Teflon <spambaitmeister@gmail.com> wrote in
news:5c054bce-36fe-4c37-ac2f-c67a78b802bc@v20g2000yqv.googlegroups.co
m:

> Thanks for responding John. My internet connection is via
> wireless (Intel Centrino in IBM laptop), connection manager is
> IBM's (Lenovo's) ThinkVantage Connections app. Disconnected and
> the Event Viewer tcpip Info messages stopped. Reconnected and the
> message every 5 seconds routine started again. All TVC indicators
> say the connection is strong and healthy. Any other ideas?
>


Sorry, no idea. If it's dependably every 5 seconds when connected,
then it may be normal. You might check to see if there is a newer
version of the Connections app.

HTH,
John
 
T

Teflon

Flightless Bird
On Apr 3, 5:36 am, Animenia <Animenia.48v...@no.email.invalid> wrote:
> Hi.
>
> To determine wether the amount of activity in the log is normal or not
> depends on your amount of softwares running that utilize the internet.
>
> Every software you have installed on your system with an "automatic
> update" feature will utilize your network connection and end up in the
> log.
>


That is something I did not consider. Do you know of an XP log, or an
app that would create a log of those applications connecting to the
Internet on their own?

> I would run a spyware/malware scan just to be certain tho.
>


I've run Malwarebytes, SuperAntispyware and Avira's Antivir. Nothing
found, nada.

> Hitman pro is a free, good software using several different
> spyware/malware and anti-virus softwares for as good a scan as
> possible.
> Depending on how much it finds the scan can take up to 10 hours.
>
> You can download Hitman Pro fromwww.hitmanpro.nl/
>
> / Ani


Thanks for responding Ani, I will take a look at Hitman Pro. Never
know which scanner will fire the silver bullet.
 
T

Twayne

Flightless Bird
In
news:2ede753c-490b-4be6-8273-2e5532f0a398@r27g2000yqn.googlegroups.com,
Teflon <spambaitmeister@gmail.com> typed:
> On Apr 3, 5:36 am, Animenia
> <Animenia.48v...@no.email.invalid> wrote:
>> Hi.
>>
>> To determine wether the amount of activity in the log is
>> normal or not depends on your amount of softwares running
>> that utilize the internet.
>>
>> Every software you have installed on your system with an
>> "automatic update" feature will utilize your network
>> connection and end up in the log.
>>

>
> That is something I did not consider. Do you know of an XP
> log, or an app that would create a log of those
> applications connecting to the Internet on their own?
>
>> I would run a spyware/malware scan just to be certain tho.
>>

>
> I've run Malwarebytes, SuperAntispyware and Avira's
> Antivir. Nothing found, nada.
>
>> Hitman pro is a free, good software using several different
>> spyware/malware and anti-virus softwares for as good a
>> scan as possible.
>> Depending on how much it finds the scan can take up to 10
>> hours.
>>
>> You can download Hitman Pro fromwww.hitmanpro.nl/
>>
>> / Ani

>
> Thanks for responding Ani, I will take a look at Hitman
> Pro. Never know which scanner will fire the silver bullet.


Check your firewall logs; they should show who's doing the
accessing.

HTH,

Twayne`
 
Top