• Welcome to Tux Reports: Where Penguins Fly. We hope you find the topics varied, interesting, and worthy of your time. Please become a member and join in the discussions.

s it normally that sent packets is higher than received? even if i dont use

C

chinna

Flightless Bird
Hello,
s it normally that sent packets is higher than received?
even if i dont use network, the packet sent status is
always raising.

1) i dont have viruses
2) i dont have GATOR or background applications running
3) i do use internet when i have this
 
T

Twayne

Flightless Bird
In news:bqSdnXoXnLJD9-DWRVn_vwA@giganews.com,
chinna <chinna@domain-xyz.in> typed:
> Hello,
> s it normally that sent packets is higher than received?
> even if i dont use network, the packet sent status is
> always raising.
>
> 1) i dont have viruses
> 2) i dont have GATOR or background applications running
> 3) i do use internet when i have this


If nothing else is running in your internet collection of programs, it's
quite possible for the Sent to be higher than the Received because
you -might- have a connection keep-alive signal being sent to your ISP in
order to keep your account from timing out. It would be a bit unusual
though, unless you were on an old analog dialup modem. With most DSL, you're
always connected anyway and they don't care how long you've sat there
inactive.
OTOH, if you have a Home Page showing or any website, it could be an
inactivity timer that needs keep-alive to prevent you from being kicked off
that site.
Normally if you watch the modem lites or the System Tray icons, you'll be
able to see it when you Send or Receive data.
If you are part of a LAN (intrAnet) it would just be the computers
keeping track of each other.
As you can see, there are many possibilities.

And on another hand yet, it could still be malware. You haven't
mentioned HOW/WHY you're sure you have no viruses, trojans, worms or other
malware installed, so it's anyone's guess how secure you might actually be.
There are ways to track down such things but at this point I don't think
you're ready for them yet.
Just to be clear: I'm not saying you ARE infected, only that you might
be. There isn't near enough information to make such a judgement.

And congrats: Apparently you've been "introduced" to the GAIN/GATOR/etc.
"spyware". Those are hard to get rid of and you could still have a piece of
one of those apps left somewhere on the disk.

Now, if the Sent is many many magnitudes GREATER than the Received bytes,
your machine has likely been taken over by a spammer's software and is
sending spam. Ir it could be being used to perform DOS attacks and all sorts
of other things you're not aware of. It could have sent out your passwords,
banks, credit cards, anything you have stored on the computer that's not
encrypted.
If you ever decide to use encryption, be certain to EXPORT the security
KEYS!

And lastly, right after a Restart and before you've done e-mail and any
surfing, if the two numbers aren't far apart from each other, and your
question is simply one of curiousity, then I wouldn't think it's much to
worry about. So far today I've only read emails since the machine
auto-started this am. My packet counters are showing 8083 Sent and 8604
Received. And, it's constantly incrementing but I am about as sure as I can
be within reason that I have no malware thanks to Norton AV, Winpatrol and a
number of spyware scanners that run nightly, and are all updated, along with
my backups. I seldom find anything but a tracking cookie now and then.

HTH,

Twayne


--
Newsgroups are great places to get assistance.
But always verify important information with
other sources to be certain you have a clear
understanding of it and that it is accurate.
 
Top