I have Windows XP SP2 with a D link wireless adapter that communicates
with a Microsoft MN 700 wireless router using 802.11g. Is there any
software out there that can tell you what particular program is
communicating wirelessly with the router? This computer is
periodically (about every 20 seconds) communicating with the router. I
am not downloading anything and I have no known applications open and
running. Is there anything out there that I can use to track down what
is causing this constant communication between my computer and the
basestation?

Thanks.

Doug

Re: What causes the wireless card to activate? by Barb

Barb
Sun Jun 08 02:21:04 PDT 2008

It is probably UPnP activity. You could log into the router and
check the logs there.

On Sat, 7 Jun 2008 19:49:10 -0700 (PDT), DGD <ddubowski@rogers.com>
wrote:

>I have Windows XP SP2 with a D link wireless adapter that communicates
>with a Microsoft MN 700 wireless router using 802.11g. Is there any
>software out there that can tell you what particular program is
>communicating wirelessly with the router? This computer is
>periodically (about every 20 seconds) communicating with the router. I
>am not downloading anything and I have no known applications open and
>running. Is there anything out there that I can use to track down what
>is causing this constant communication between my computer and the
>basestation?
>
>Thanks.
>
>Doug
--

Barb Bowman
MS-MVP
http://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.mspx
http://blogs.digitalmediaphile.com/barb/

Re: What causes the wireless card to activate? by DGD

DGD
Sun Jun 08 04:40:59 PDT 2008

On Jun 8, 5:21 am, Barb Bowman <b...@nospam.com> wrote:
> It is probably UPnP activity. You could log into the router and
> check the logs there.
>
> On Sat, 7 Jun 2008 19:49:10 -0700 (PDT), DGD <ddubow...@rogers.com>
> wrote:
>
> >I have Windows XP SP2 with a D link wireless adapter that communicates
> >with a Microsoft MN 700 wireless router using 802.11g. Is there any
> >software out there that can tell you what particular program is
> >communicating wirelessly with the router? This computer is
> >periodically (about every 20 seconds) communicating with the router. I
> >am not downloading anything and I have no known applications open and
> >running. Is there anything out there that I can use to track down what
> >is causing this constant communication between my computer and the
> >basestation?
>
> >Thanks.
>
> >Doug
>
> --
>
> Barb Bowman
> MS-MVPhttp://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.mspxhttp://blogs.digitalmediaphile.com/barb/

Not sure what you mean by UPnP activity. In any case here is an
extract from my router log. I have eliminated the IP addresses:

2008/06/07 23:49:08 DHCP Client : Request sent from 72.xxx.xxx.xxx to
99.xxx.xxx.xxx
2008/06/07 23:49:08 DHCP Client : Server response sent from
10.xxx.xxx.xxx to 72.xxx.xxx.xxx
2008/06/07 23:49:08 DHCP Client : Server response sent from
10.xxx.xxx.xxx to 72.xxx.xxx.xxx

This doesn't come close to capturing the amount of communication that
was going on and time line that it occured. My router doesn't appear
to track this in the device log.


Doug

Re: What causes the wireless card to activate? by DGD

DGD
Sun Jun 08 05:44:37 PDT 2008

On Jun 8, 7:40 am, DGD <ddubow...@rogers.com> wrote:
> On Jun 8, 5:21 am, Barb Bowman <b...@nospam.com> wrote:
>
>
>
> > It is probably UPnP activity. You could log into the router and
> > check the logs there.
>
> > On Sat, 7 Jun 2008 19:49:10 -0700 (PDT), DGD <ddubow...@rogers.com>
> > wrote:
>
> > >I have Windows XP SP2 with a D link wireless adapter that communicates
> > >with a Microsoft MN 700 wireless router using 802.11g. Is there any
> > >software out there that can tell you what particular program is
> > >communicating wirelessly with the router? This computer is
> > >periodically (about every 20 seconds) communicating with the router. I
> > >am not downloading anything and I have no known applications open and
> > >running. Is there anything out there that I can use to track down what
> > >is causing this constant communication between my computer and the
> > >basestation?
>
> > >Thanks.
>
> > >Doug
>
> > --
>
> > Barb Bowman
> > MS-MVPhttp://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.mspx...
>
> Not sure what you mean by UPnP activity. In any case here is an
> extract from my router log. I have eliminated the IP addresses:
>
> 2008/06/07 23:49:08 DHCP Client : Request sent from 72.xxx.xxx.xxx to
> 99.xxx.xxx.xxx
> 2008/06/07 23:49:08 DHCP Client : Server response sent from
> 10.xxx.xxx.xxx to 72.xxx.xxx.xxx
> 2008/06/07 23:49:08 DHCP Client : Server response sent from
> 10.xxx.xxx.xxx to 72.xxx.xxx.xxx
>
> This doesn't come close to capturing the amount of communication that
> was going on and time line that it occured. My router doesn't appear
> to track this in the device log.
>
> Doug

Actually when I look at the computer in question, it is constantly
communicating with the router. I had orginally said about every 20
seconds, but my icon in the system tray for wireless communications is
constantly blinking and I can see my wireless router constantly
communicating with my external broadband connection.

Re: What causes the wireless card to activate? by Barb

Barb
Sun Jun 08 09:13:29 PDT 2008

Doug,
Looks like you've changed the addressing scheme, since by default
the MN700 uses 192.168.2.xxx addressing. do you want to describe
your network topology? You've got three ranges listed
99...
10...
72...

72 is likely Rogers, but not sure what 99 is.

without seeing the whole entries, it is tough to determine what is
going on.

note that there is a lot of probing, etc. present on the Internet.
the router should be stopping that with SPI. I'd have to see the
log of traffic to the computers IP to even guess on what is going
on.

UPnP - windows messenger and other programs use this.

On Sun, 8 Jun 2008 04:40:59 -0700 (PDT), DGD <ddubowski@rogers.com>
wrote:

>Not sure what you mean by UPnP activity. In any case here is an
>extract from my router log. I have eliminated the IP addresses:
>
>2008/06/07 23:49:08 DHCP Client : Request sent from 72.xxx.xxx.xxx to
>99.xxx.xxx.xxx
>2008/06/07 23:49:08 DHCP Client : Server response sent from
>10.xxx.xxx.xxx to 72.xxx.xxx.xxx
>2008/06/07 23:49:08 DHCP Client : Server response sent from
>10.xxx.xxx.xxx to 72.xxx.xxx.xxx
>
>This doesn't come close to capturing the amount of communication that
>was going on and time line that it occured. My router doesn't appear
>to track this in the device log.
--

Barb Bowman
MS-MVP
http://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.mspx
http://blogs.digitalmediaphile.com/barb/

Re: What causes the wireless card to activate? by Barb

Barb
Sun Jun 08 09:18:57 PDT 2008

post the entire log. don't change the entries.

just mask your OWN **external** IP address. sample

1643 Log Entries: Priority Time Message
[INFO] Sun Jun 08 12:14:42 2008 Allowed configuration authentication
by IP address 192.168.1.108
[INFO] Sun Jun 08 12:08:54 2008 Blocked incoming UDP packet from
125.211.198.12:52243 to XX.XX.XX.XX:1026
[INFO] Sun Jun 08 12:06:56 2008 Blocked incoming UDP packet from
122.141.75.2:57859 to XX.XX.XX.XX:1027
[INFO] Sun Jun 08 12:06:56 2008 Blocked incoming UDP packet from
122.141.75.2:57857 to XX.XX.XX.XX:1026
[INFO] Sun Jun 08 12:06:53 2008 Blocked incoming TCP connection
request from 220.192.16.38:41620 to XX.XX.XX.XX:22
[INFO] Sun Jun 08 12:06:50 2008 Above message repeated 1 times
[INFO] Sun Jun 08 12:01:35 2008 Blocked incoming UDP packet from
60.222.253.103:57511 to XX.XX.XX.XX:1027
[INFO] Sun Jun 08 11:54:27 2008 Blocked incoming UDP packet from
24.64.159.70:10228 to XX.XX.XX.XX:1028
[INFO] Sun Jun 08 11:54:27 2008 Blocked incoming UDP packet from
24.64.159.70:10228 to XX.XX.XX.XX:1027
[INFO] Sun Jun 08 11:54:27 2008 Blocked incoming UDP packet from
24.64.159.70:10228 to XX.XX.XX.XX:1026
[INFO] Sun Jun 08 11:50:27 2008 Blocked incoming UDP packet from
122.141.75.2:46855 to XX.XX.XX.XX:1026
[INFO] Sun Jun 08 11:50:27 2008 Blocked incoming UDP packet from
122.141.75.2:46856 to XX.XX.XX.XX:1027
[INFO] Sun Jun 08 11:42:01 2008 Blocked incoming TCP connection
request from 64.3.132.99:3641 to XX.XX.XX.XX:5900
[INFO] Sun Jun 08 11:41:58 2008 Above message repeated 1 times
[INFO] Sun Jun 08 11:33:30 2008 2.4GHz Band 1p0hert: Wireless system
with MAC address 0016CF1AFB5A associated
[INFO] Sun Jun 08 11:33:24 2008 Blocked incoming UDP packet from
24.64.227.221:18510 to XX.XX.XX.XX:1028
[INFO] Sun Jun 08 11:33:24 2008 Blocked incoming UDP packet from
24.64.227.221:18510 to XX.XX.XX.XX:1027
[INFO] Sun Jun 08 11:33:24 2008 Blocked incoming UDP packet from
24.64.227.221:18510 to XX.XX.XX.XX:1026
[INFO] Sun Jun 08 11:30:13 2008 Blocked incoming UDP packet from
68.87.71.228:53 to XX.XX.XX.XX:49711
[INFO] Sun Jun 08 11:19:47 2008 Blocked incoming TCP connection
request from 195.207.8.29:30886 to XX.XX.XX.XX:22
[INFO] Sun Jun 08 11:18:42 2008 Blocked incoming TCP connection
request from 202.136.119.155:6000 to XX.XX.XX.XX:1433
[WARN] Sun Jun 08 11:18:39 2008 A network computer (littleone) was
assigned the IP address of 192.168.1.196.
[INFO] Sun Jun 08 11:18:37 2008 2.4GHz Band 1p0hert: Wireless system
with MAC address 001A73E3F9E2 associated
[INFO] Sun Jun 08 11:17:14 2008 Blocked incoming UDP packet from
122.141.75.2:54795 to XX.XX.XX.XX:1026
[INFO] Sun Jun 08 11:17:14 2008 Blocked incoming UDP packet from
122.141.75.2:54796 to XX.XX.XX.XX:1027
[INFO] Sun Jun 08 11:14:25 2008 Blocked incoming UDP packet from
24.64.184.6:18049 to XX.XX.XX.XX:1028
[INFO] Sun Jun 08 11:14:25 2008 Blocked incoming UDP packet from
24.64.184.6:18049 to XX.XX.XX.XX:1027
[INFO] Sun Jun 08 11:14:25 2008 Blocked incoming UDP packet from
24.64.184.6:18049 to XX.XX.XX.XX:1026
[INFO] Sun Jun 08 11:11:51 2008 Blocked incoming UDP packet from
24.64.109.180:5285 to XX.XX.XX.XX:1028
[INFO] Sun Jun 08 11:11:51 2008 Blocked incoming UDP packet from
24.64.109.180:5285 to XX.XX.XX.XX:1027
[INFO] Sun Jun 08 11:11:51 2008 Blocked incoming UDP packet from
24.64.109.180:5285 to XX.XX.XX.XX:1026
[INFO] Sun Jun 08 10:59:53 2008 Blocked incoming UDP packet from
24.64.185.211:30813 to XX.XX.XX.XX:1028


On Sun, 8 Jun 2008 05:44:37 -0700 (PDT), DGD <ddubowski@rogers.com>
wrote:

>Actually when I look at the computer in question, it is constantly
>communicating with the router. I had orginally said about every 20
>seconds, but my icon in the system tray for wireless communications is
>constantly blinking and I can see my wireless router constantly
>communicating with my external broadband connection.
--

Barb Bowman
MS-MVP
http://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.mspx
http://blogs.digitalmediaphile.com/barb/

Re: What causes the wireless card to activate? by DGD

DGD
Sun Jun 08 11:58:24 PDT 2008

On Jun 8, 12:18 pm, Barb Bowman <b...@nospam.com> wrote:
> post the entire log. don't change the entries.
>
> just mask your OWN **external** IP address. sample
>
> 1643 Log Entries: Priority Time Message
> [INFO] Sun Jun 08 12:14:42 2008 Allowed configuration authentication
> by IP address 192.168.1.108
> [INFO] Sun Jun 08 12:08:54 2008 Blocked incoming UDP packet from
> 125.211.198.12:52243 to XX.XX.XX.XX:1026
> [INFO] Sun Jun 08 12:06:56 2008 Blocked incoming UDP packet from
> 122.141.75.2:57859 to XX.XX.XX.XX:1027
> [INFO] Sun Jun 08 12:06:56 2008 Blocked incoming UDP packet from
> 122.141.75.2:57857 to XX.XX.XX.XX:1026
> [INFO] Sun Jun 08 12:06:53 2008 Blocked incoming TCP connection
> request from 220.192.16.38:41620 to XX.XX.XX.XX:22
> [INFO] Sun Jun 08 12:06:50 2008 Above message repeated 1 times
> [INFO] Sun Jun 08 12:01:35 2008 Blocked incoming UDP packet from
> 60.222.253.103:57511 to XX.XX.XX.XX:1027
> [INFO] Sun Jun 08 11:54:27 2008 Blocked incoming UDP packet from
> 24.64.159.70:10228 to XX.XX.XX.XX:1028
> [INFO] Sun Jun 08 11:54:27 2008 Blocked incoming UDP packet from
> 24.64.159.70:10228 to XX.XX.XX.XX:1027
> [INFO] Sun Jun 08 11:54:27 2008 Blocked incoming UDP packet from
> 24.64.159.70:10228 to XX.XX.XX.XX:1026
> [INFO] Sun Jun 08 11:50:27 2008 Blocked incoming UDP packet from
> 122.141.75.2:46855 to XX.XX.XX.XX:1026
> [INFO] Sun Jun 08 11:50:27 2008 Blocked incoming UDP packet from
> 122.141.75.2:46856 to XX.XX.XX.XX:1027
> [INFO] Sun Jun 08 11:42:01 2008 Blocked incoming TCP connection
> request from 64.3.132.99:3641 to XX.XX.XX.XX:5900
> [INFO] Sun Jun 08 11:41:58 2008 Above message repeated 1 times
> [INFO] Sun Jun 08 11:33:30 2008 2.4GHz Band 1p0hert: Wireless system
> with MAC address 0016CF1AFB5A associated
> [INFO] Sun Jun 08 11:33:24 2008 Blocked incoming UDP packet from
> 24.64.227.221:18510 to XX.XX.XX.XX:1028
> [INFO] Sun Jun 08 11:33:24 2008 Blocked incoming UDP packet from
> 24.64.227.221:18510 to XX.XX.XX.XX:1027
> [INFO] Sun Jun 08 11:33:24 2008 Blocked incoming UDP packet from
> 24.64.227.221:18510 to XX.XX.XX.XX:1026
> [INFO] Sun Jun 08 11:30:13 2008 Blocked incoming UDP packet from
> 68.87.71.228:53 to XX.XX.XX.XX:49711
> [INFO] Sun Jun 08 11:19:47 2008 Blocked incoming TCP connection
> request from 195.207.8.29:30886 to XX.XX.XX.XX:22
> [INFO] Sun Jun 08 11:18:42 2008 Blocked incoming TCP connection
> request from 202.136.119.155:6000 to XX.XX.XX.XX:1433
> [WARN] Sun Jun 08 11:18:39 2008 A network computer (littleone) was
> assigned the IP address of 192.168.1.196.
> [INFO] Sun Jun 08 11:18:37 2008 2.4GHz Band 1p0hert: Wireless system
> with MAC address 001A73E3F9E2 associated
> [INFO] Sun Jun 08 11:17:14 2008 Blocked incoming UDP packet from
> 122.141.75.2:54795 to XX.XX.XX.XX:1026
> [INFO] Sun Jun 08 11:17:14 2008 Blocked incoming UDP packet from
> 122.141.75.2:54796 to XX.XX.XX.XX:1027
> [INFO] Sun Jun 08 11:14:25 2008 Blocked incoming UDP packet from
> 24.64.184.6:18049 to XX.XX.XX.XX:1028
> [INFO] Sun Jun 08 11:14:25 2008 Blocked incoming UDP packet from
> 24.64.184.6:18049 to XX.XX.XX.XX:1027
> [INFO] Sun Jun 08 11:14:25 2008 Blocked incoming UDP packet from
> 24.64.184.6:18049 to XX.XX.XX.XX:1026
> [INFO] Sun Jun 08 11:11:51 2008 Blocked incoming UDP packet from
> 24.64.109.180:5285 to XX.XX.XX.XX:1028
> [INFO] Sun Jun 08 11:11:51 2008 Blocked incoming UDP packet from
> 24.64.109.180:5285 to XX.XX.XX.XX:1027
> [INFO] Sun Jun 08 11:11:51 2008 Blocked incoming UDP packet from
> 24.64.109.180:5285 to XX.XX.XX.XX:1026
> [INFO] Sun Jun 08 10:59:53 2008 Blocked incoming UDP packet from
> 24.64.185.211:30813 to XX.XX.XX.XX:1028
>
> On Sun, 8 Jun 2008 05:44:37 -0700 (PDT), DGD <ddubow...@rogers.com>
> wrote:
>
> >Actually when I look at the computer in question, it is constantly
> >communicating with the router. I had orginally said about every 20
> >seconds, but my icon in the system tray for wireless communications is
> >constantly blinking and I can see my wireless router constantly
> >communicating with my external broadband connection.
>
> --
>
> Barb Bowman
> MS-MVPhttp://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.mspxhttp://blogs.digitalmediaphile.com/barb/

Thanks for the feedback. My router does use a 192.168.xxx.xxx
addressing scheme for the internal wireless network. The device log,
however, does not record any of the internal traffic. My ISP is
Rogers. I disconnected my wireless router from the Rogers box,
totally disconnecting and isolating my home entwork from the
internet. The wireless adapter I am concerned about continued to
communicate with the basestation, so there is nothing from the outside
seeking input. The wireless adapter continues to constantly
communicate. I have re-installed the wireless adapter, updated the
drivers and the same thing occurs. I am wondering if it has to do
with Microsoft messanger. The computer is my daughter's and she is
constantly using this program to "talk" to people. Can Messanger be
constantly polling the wireless router? I tried shutting it down, but
the constant communication with the wireless router continued.


Doug

Re: What causes the wireless card to activate? by DGD

DGD
Sun Jun 08 20:57:48 PDT 2008

On Jun 8, 2:58 pm, DGD <ddubow...@rogers.com> wrote:
> On Jun 8, 12:18 pm, Barb Bowman <b...@nospam.com> wrote:
>
>
>
> > post the entire log. don't change the entries.
>
> > just mask your OWN **external** IP address. sample
>
> > 1643 Log Entries: Priority Time Message
> > [INFO] Sun Jun 08 12:14:42 2008 Allowed configuration authentication
> > by IP address 192.168.1.108
> > [INFO] Sun Jun 08 12:08:54 2008 Blocked incoming UDP packet from
> > 125.211.198.12:52243 to XX.XX.XX.XX:1026
> > [INFO] Sun Jun 08 12:06:56 2008 Blocked incoming UDP packet from
> > 122.141.75.2:57859 to XX.XX.XX.XX:1027
> > [INFO] Sun Jun 08 12:06:56 2008 Blocked incoming UDP packet from
> > 122.141.75.2:57857 to XX.XX.XX.XX:1026
> > [INFO] Sun Jun 08 12:06:53 2008 Blocked incoming TCP connection
> > request from 220.192.16.38:41620 to XX.XX.XX.XX:22
> > [INFO] Sun Jun 08 12:06:50 2008 Above message repeated 1 times
> > [INFO] Sun Jun 08 12:01:35 2008 Blocked incoming UDP packet from
> > 60.222.253.103:57511 to XX.XX.XX.XX:1027
> > [INFO] Sun Jun 08 11:54:27 2008 Blocked incoming UDP packet from
> > 24.64.159.70:10228 to XX.XX.XX.XX:1028
> > [INFO] Sun Jun 08 11:54:27 2008 Blocked incoming UDP packet from
> > 24.64.159.70:10228 to XX.XX.XX.XX:1027
> > [INFO] Sun Jun 08 11:54:27 2008 Blocked incoming UDP packet from
> > 24.64.159.70:10228 to XX.XX.XX.XX:1026
> > [INFO] Sun Jun 08 11:50:27 2008 Blocked incoming UDP packet from
> > 122.141.75.2:46855 to XX.XX.XX.XX:1026
> > [INFO] Sun Jun 08 11:50:27 2008 Blocked incoming UDP packet from
> > 122.141.75.2:46856 to XX.XX.XX.XX:1027
> > [INFO] Sun Jun 08 11:42:01 2008 Blocked incoming TCP connection
> > request from 64.3.132.99:3641 to XX.XX.XX.XX:5900
> > [INFO] Sun Jun 08 11:41:58 2008 Above message repeated 1 times
> > [INFO] Sun Jun 08 11:33:30 2008 2.4GHz Band 1p0hert: Wireless system
> > with MAC address 0016CF1AFB5A associated
> > [INFO] Sun Jun 08 11:33:24 2008 Blocked incoming UDP packet from
> > 24.64.227.221:18510 to XX.XX.XX.XX:1028
> > [INFO] Sun Jun 08 11:33:24 2008 Blocked incoming UDP packet from
> > 24.64.227.221:18510 to XX.XX.XX.XX:1027
> > [INFO] Sun Jun 08 11:33:24 2008 Blocked incoming UDP packet from
> > 24.64.227.221:18510 to XX.XX.XX.XX:1026
> > [INFO] Sun Jun 08 11:30:13 2008 Blocked incoming UDP packet from
> > 68.87.71.228:53 to XX.XX.XX.XX:49711
> > [INFO] Sun Jun 08 11:19:47 2008 Blocked incoming TCP connection
> > request from 195.207.8.29:30886 to XX.XX.XX.XX:22
> > [INFO] Sun Jun 08 11:18:42 2008 Blocked incoming TCP connection
> > request from 202.136.119.155:6000 to XX.XX.XX.XX:1433
> > [WARN] Sun Jun 08 11:18:39 2008 A network computer (littleone) was
> > assigned the IP address of 192.168.1.196.
> > [INFO] Sun Jun 08 11:18:37 2008 2.4GHz Band 1p0hert: Wireless system
> > with MAC address 001A73E3F9E2 associated
> > [INFO] Sun Jun 08 11:17:14 2008 Blocked incoming UDP packet from
> > 122.141.75.2:54795 to XX.XX.XX.XX:1026
> > [INFO] Sun Jun 08 11:17:14 2008 Blocked incoming UDP packet from
> > 122.141.75.2:54796 to XX.XX.XX.XX:1027
> > [INFO] Sun Jun 08 11:14:25 2008 Blocked incoming UDP packet from
> > 24.64.184.6:18049 to XX.XX.XX.XX:1028
> > [INFO] Sun Jun 08 11:14:25 2008 Blocked incoming UDP packet from
> > 24.64.184.6:18049 to XX.XX.XX.XX:1027
> > [INFO] Sun Jun 08 11:14:25 2008 Blocked incoming UDP packet from
> > 24.64.184.6:18049 to XX.XX.XX.XX:1026
> > [INFO] Sun Jun 08 11:11:51 2008 Blocked incoming UDP packet from
> > 24.64.109.180:5285 to XX.XX.XX.XX:1028
> > [INFO] Sun Jun 08 11:11:51 2008 Blocked incoming UDP packet from
> > 24.64.109.180:5285 to XX.XX.XX.XX:1027
> > [INFO] Sun Jun 08 11:11:51 2008 Blocked incoming UDP packet from
> > 24.64.109.180:5285 to XX.XX.XX.XX:1026
> > [INFO] Sun Jun 08 10:59:53 2008 Blocked incoming UDP packet from
> > 24.64.185.211:30813 to XX.XX.XX.XX:1028
>
> > On Sun, 8 Jun 2008 05:44:37 -0700 (PDT), DGD <ddubow...@rogers.com>
> > wrote:
>
> > >Actually when I look at the computer in question, it is constantly
> > >communicating with the router. I had orginally said about every 20
> > >seconds, but my icon in the system tray for wireless communications is
> > >constantly blinking and I can see my wireless router constantly
> > >communicating with my external broadband connection.
>
> > --
>
> > Barb Bowman
> > MS-MVPhttp://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.mspx...
>
> Thanks for the feedback. My router does use a 192.168.xxx.xxx
> addressing scheme for the internal wireless network. The device log,
> however, does not record any of the internal traffic. My ISP is
> Rogers. I disconnected my wireless router from the Rogers box,
> totally disconnecting and isolating my home entwork from the
> internet. The wireless adapter I am concerned about continued to
> communicate with the basestation, so there is nothing from the outside
> seeking input. The wireless adapter continues to constantly
> communicate. I have re-installed the wireless adapter, updated the
> drivers and the same thing occurs. I am wondering if it has to do
> with Microsoft messanger. The computer is my daughter's and she is
> constantly using this program to "talk" to people. Can Messanger be
> constantly polling the wireless router? I tried shutting it down, but
> the constant communication with the wireless router continued.
>
> Doug

I traced my problem back to my recently installed wireless printer.
It appears there is nothing wrong with the adapter. If i turn the
printer or the printer's radio off, all of the communication I see on
the adapter goes away. It was actually affecting two computers, both
of which I have set up to print wirelessly with my HP C7250 all-in-one
printer. Had a frustrating online chat with a tech support rep from
HP who insisted this is normal wireless behaviour. If there are no
print requests being made, why is the printer constantly communicating
with the computers (I am getting a transmission indication every 1 - 2
seconds). And it is the printer. I disabled all HP running processes
on one computer and the transmissions continued. They only stopped
when i turned the printer's radio off. Any ideas out there on what to
do apart from returning the printer? HP's recommendation was to turn
the printer's radio off and only turn it on when I wanted to print. I
have four computers spread out throughout the house. Most
impractical. Thanks.

Re: What causes the wireless card to activate? by Barb

Barb
Mon Jun 09 11:58:02 PDT 2008

is the wireless on the printer set up as DHCP or static IP?

On Sun, 8 Jun 2008 20:57:48 -0700 (PDT), DGD <ddubowski@rogers.com>
wrote:

>I traced my problem back to my recently installed wireless printer.
>It appears there is nothing wrong with the adapter. If i turn the
>printer or the printer's radio off, all of the communication I see on
>the adapter goes away. It was actually affecting two computers, both
>of which I have set up to print wirelessly with my HP C7250 all-in-one
>printer. Had a frustrating online chat with a tech support rep from
>HP who insisted this is normal wireless behaviour. If there are no
>print requests being made, why is the printer constantly communicating
>with the computers (I am getting a transmission indication every 1 - 2
>seconds). And it is the printer. I disabled all HP running processes
>on one computer and the transmissions continued. They only stopped
>when i turned the printer's radio off. Any ideas out there on what to
>do apart from returning the printer? HP's recommendation was to turn
>the printer's radio off and only turn it on when I wanted to print. I
>have four computers spread out throughout the house. Most
>impractical. Thanks.
--

Barb Bowman
MS-MVP
http://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.mspx
http://blogs.digitalmediaphile.com/barb/

Re: What causes the wireless card to activate? by DGD

DGD
Mon Jun 09 15:28:53 PDT 2008

On Jun 9, 2:58 pm, Barb Bowman <b...@nospam.com> wrote:
> is the wireless on the printer set up as DHCP or static IP?
>
> On Sun, 8 Jun 2008 20:57:48 -0700 (PDT), DGD <ddubow...@rogers.com>
> wrote:
>
>
>
> >I traced my problem back to my recently installed wireless printer.
> >It appears there is nothing wrong with the adapter. If i turn the
> >printer or the printer's radio off, all of the communication I see on
> >the adapter goes away. It was actually affecting two computers, both
> >of which I have set up to print wirelessly with my HP C7250 all-in-one
> >printer. Had a frustrating online chat with a tech support rep from
> >HP who insisted this is normal wireless behaviour. If there are no
> >print requests being made, why is the printer constantly communicating
> >with the computers (I am getting a transmission indication every 1 - 2
> >seconds). And it is the printer. I disabled all HP running processes
> >on one computer and the transmissions continued. They only stopped
> >when i turned the printer's radio off. Any ideas out there on what to
> >do apart from returning the printer? HP's recommendation was to turn
> >the printer's radio off and only turn it on when I wanted to print. I
> >have four computers spread out throughout the house. Most
> >impractical. Thanks.
>
> --
>
> Barb Bowman
> MS-MVPhttp://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.mspxhttp://blogs.digitalmediaphile.com/barb/

It gets its address through a DCHP hosted in the wireless router.

Doug

Re: What causes the wireless card to activate? by smlunatick

smlunatick
Mon Jun 09 19:12:45 PDT 2008

On Jun 8, 12:13=A0pm, Barb Bowman <b...@nospam.com> wrote:
> Doug,
> Looks like you've changed the addressing scheme, since by default
> the MN700 uses 192.168.2.xxx addressing. do you want to describe
> your network topology? You've got three ranges listed
> 99...
> 10...
> 72...
>
> 72 is likely Rogers, but not sure what 99 is.
>
> without seeing the whole entries, it is tough to determine what is
> going on.
>
> note that there is a lot of probing, etc. present on the Internet.
> the router should be stopping that with SPI. =A0I'd have to see the
> log of traffic to the computers IP to even guess on what is going
> on.
>
> UPnP - windows messenger and other programs use this.
>
> On Sun, 8 Jun 2008 04:40:59 -0700 (PDT), DGD <ddubow...@rogers.com>
> wrote:
>
> >Not sure what you mean by UPnP activity. =A0In any case here is an
> >extract from my router log. =A0I have eliminated the IP addresses:
>
> >2008/06/07 23:49:08 DHCP Client : Request sent from 72.xxx.xxx.xxx to
> >99.xxx.xxx.xxx
> >2008/06/07 23:49:08 DHCP Client : Server response sent from
> >10.xxx.xxx.xxx to 72.xxx.xxx.xxx
> >2008/06/07 23:49:08 DHCP Client : Server response sent from
> >10.xxx.xxx.xxx to 72.xxx.xxx.xxx
>
> >This doesn't come close to capturing the amount of communication that
> >was going on and time line that it occured. =A0My router doesn't appear
> >to track this in the device log.
>
> --
>
> Barb Bowman
> MS-MVPhttp://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.msp=
xhttp://blogs.digitalmediaphile.com/barb/

The printer should be using an IP address porgrammed onto in via the
unit's console (aka static IP.) Depending on the DHCP lease time may
be set too low.

Also, any "enhanced" management console installed on the PC will
generate traffic.

Re: What causes the wireless card to activate? by DGD

DGD
Tue Jun 10 07:48:02 PDT 2008

On Jun 9, 10:12=A0pm, smlunatick <yves...@gmail.com> wrote:
> On Jun 8, 12:13=A0pm, Barb Bowman <b...@nospam.com> wrote:
>
>
>
>
>
> > Doug,
> > Looks like you've changed the addressing scheme, since by default
> > the MN700 uses 192.168.2.xxx addressing. do you want to describe
> > your network topology? You've got three ranges listed
> > 99...
> > 10...
> > 72...
>
> > 72 is likely Rogers, but not sure what 99 is.
>
> > without seeing the whole entries, it is tough to determine what is
> > going on.
>
> > note that there is a lot of probing, etc. present on the Internet.
> > the router should be stopping that with SPI. =A0I'd have to see the
> > log of traffic to the computers IP to even guess on what is going
> > on.
>
> > UPnP - windows messenger and other programs use this.
>
> > On Sun, 8 Jun 2008 04:40:59 -0700 (PDT), DGD <ddubow...@rogers.com>
> > wrote:
>
> > >Not sure what you mean by UPnP activity. =A0In any case here is an
> > >extract from my router log. =A0I have eliminated the IP addresses:
>
> > >2008/06/07 23:49:08 DHCP Client : Request sent from 72.xxx.xxx.xxx to
> > >99.xxx.xxx.xxx
> > >2008/06/07 23:49:08 DHCP Client : Server response sent from
> > >10.xxx.xxx.xxx to 72.xxx.xxx.xxx
> > >2008/06/07 23:49:08 DHCP Client : Server response sent from
> > >10.xxx.xxx.xxx to 72.xxx.xxx.xxx
>
> > >This doesn't come close to capturing the amount of communication that
> > >was going on and time line that it occured. =A0My router doesn't appear=

> > >to track this in the device log.
>
> > --
>
> > Barb Bowman
> > MS-MVPhttp://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.m=
spx...
>
> The printer should be using an IP address porgrammed onto in via the
> unit's console (aka static IP.) =A0Depending on the DHCP lease time may
> be set too low.
>
> Also, any "enhanced" management console installed on the PC will
> generate traffic.- Hide quoted text -
>
> - Show quoted text -

The lease time is usually two weeks, but I will check later. The
traffic I am concerned about is coming from the printer and is
independent of any "management console" software installed on the PC.
I disabled all HP software on the laptop and this had no affect on the
amount of transmissions being received on the laptop. These
transmissions only stopped when the printer's radio was turned off.
I don't see the relationship between an auto or static IP address and
the amount of time the printer is communicating with computers. Why
would making the printer's address "static" make any difference to why
it constantly transmitting?

Doug

Re: What causes the wireless card to activate? by smlunatick

smlunatick
Mon Jun 16 08:21:10 PDT 2008

On Jun 10, 3:48 pm, DGD <ddubow...@rogers.com> wrote:
> On Jun 9, 10:12 pm, smlunatick <yves...@gmail.com> wrote:
>
>
>
> > On Jun 8, 12:13 pm, Barb Bowman <b...@nospam.com> wrote:
>
> > > Doug,
> > > Looks like you've changed the addressing scheme, since by default
> > > the MN700 uses 192.168.2.xxx addressing. do you want to describe
> > > your network topology? You've got three ranges listed
> > > 99...
> > > 10...
> > > 72...
>
> > > 72 is likely Rogers, but not sure what 99 is.
>
> > > without seeing the whole entries, it is tough to determine what is
> > > going on.
>
> > > note that there is a lot of probing, etc. present on the Internet.
> > > the router should be stopping that with SPI. I'd have to see the
> > > log of traffic to the computers IP to even guess on what is going
> > > on.
>
> > > UPnP - windows messenger and other programs use this.
>
> > > On Sun, 8 Jun 2008 04:40:59 -0700 (PDT), DGD <ddubow...@rogers.com>
> > > wrote:
>
> > > >Not sure what you mean by UPnP activity. In any case here is an
> > > >extract from my router log. I have eliminated the IP addresses:
>
> > > >2008/06/07 23:49:08 DHCP Client : Request sent from 72.xxx.xxx.xxx to
> > > >99.xxx.xxx.xxx
> > > >2008/06/07 23:49:08 DHCP Client : Server response sent from
> > > >10.xxx.xxx.xxx to 72.xxx.xxx.xxx
> > > >2008/06/07 23:49:08 DHCP Client : Server response sent from
> > > >10.xxx.xxx.xxx to 72.xxx.xxx.xxx
>
> > > >This doesn't come close to capturing the amount of communication that
> > > >was going on and time line that it occured. My router doesn't appear
> > > >to track this in the device log.
>
> > > --
>
> > > Barb Bowman
> > > MS-MVPhttp://www.microsoft.com/windowsxp/expertzone/meetexperts/bowman.mspx...
>
> > The printer should be using an IP address porgrammed onto in via the
> > unit's console (aka static IP.) Depending on the DHCP lease time may
> > be set too low.
>
> > Also, any "enhanced" management console installed on the PC will
> > generate traffic.- Hide quoted text -
>
> > - Show quoted text -
>
> The lease time is usually two weeks, but I will check later. The
> traffic I am concerned about is coming from the printer and is
> independent of any "management console" software installed on the PC.
> I disabled all HP software on the laptop and this had no affect on the
> amount of transmissions being received on the laptop. These
> transmissions only stopped when the printer's radio was turned off.
> I don't see the relationship between an auto or static IP address and
> the amount of time the printer is communicating with computers. Why
> would making the printer's address "static" make any difference to why
> it constantly transmitting?
>
> Doug

Using a static IP address for the printer will remove the DHCP service
"activity" over the network for the printer. With DHCP "clients,"
they request an IP address over the network when the lease time-out
has expired. For servers and printer, these are units that you must
always find across your network and with their DHCP "clients," these
may obtain a different IP address at every lease renewal. I have
encountered times where these never got a valid IP address so they
were not shown across the network.

Re: What causes the wireless card to activate? by DGD

DGD
Mon Jun 16 10:20:53 PDT 2008

On Jun 16, 11:21=A0am, smlunatick <yves...@gmail.com> wrote:
> On Jun 10, 3:48 pm, DGD <ddubow...@rogers.com> wrote:
>
>
>
>
>
> > On Jun 9, 10:12 pm, smlunatick <yves...@gmail.com> wrote:
>
> > > On Jun 8, 12:13 pm, Barb Bowman <b...@nospam.com> wrote:
>
> > > > Doug,
> > > > Looks like you've changed the addressing scheme, since by default
> > > > the MN700 uses 192.168.2.xxx addressing. do you want to describe
> > > > your network topology? You've got three ranges listed
> > > > 99...
> > > > 10...
> > > > 72...
>
> > > > 72 is likely Rogers, but not sure what 99 is.
>
> > > > without seeing the whole entries, it is tough to determine what is
> > > > going on.
>
> > > > note that there is a lot of probing, etc. present on the Internet.
> > > > the router should be stopping that with SPI. =A0I'd have to see the
> > > > log of traffic to the computers IP to even guess on what is going
> > > > on.
>
> > > > UPnP - windows messenger and other programs use this.
>
> > > > On Sun, 8 Jun 2008 04:40:59 -0700 (PDT), DGD <ddubow...@rogers.com>
> > > > wrote:
>
> > > > >Not sure what you mean by UPnP activity. =A0In any case here is an
> > > > >extract from my router log. =A0I have eliminated the IP addresses:
>
> > > > >2008/06/07 23:49:08 DHCP Client : Request sent from 72.xxx.xxx.xxx =
to
> > > > >99.xxx.xxx.xxx
> > > > >2008/06/07 23:49:08 DHCP Client : Server response sent from
> > > > >10.xxx.xxx.xxx to 72.xxx.xxx.xxx
> > > > >2008/06/07 23:49:08 DHCP Client : Server response sent from
> > > > >10.xxx.xxx.xxx to 72.xxx.xxx.xxx
>
> > > > >This doesn't come close to capturing the amount of communication th=
at
> > > > >was going on and time line that it occured. =A0My router doesn't ap=
pear
> > > > >to track this in the device log.
>
> > > > --
>
> > > > Barb Bowman
> > > > MS-MVPhttp://www.microsoft.com/windowsxp/expertzone/meetexperts/bowm=
an.mspx...
>
> > > The printer should be using an IP address porgrammed onto in via the
> > > unit's console (aka static IP.) =A0Depending on the DHCP lease time ma=
y
> > > be set too low.
>
> > > Also, any "enhanced" management console installed on the PC will
> > > generate traffic.- Hide quoted text -
>
> > > - Show quoted text -
>
> > The lease time is usually two weeks, but I will check later. =A0The
> > traffic I am concerned about is coming from the printer and is
> > independent of any "management console" software installed on the PC.
> > I disabled all HP software on the laptop and this had no affect on the
> > amount of transmissions being received on the laptop. =A0These
> > transmissions only stopped when the printer's radio was turned off.
> > I don't see the relationship between an auto or static IP address and
> > the amount of time the printer is communicating with computers. =A0Why
> > would making the printer's address "static" make any difference to why
> > it constantly transmitting?
>
> > Doug
>
> Using a static IP address for the printer will remove the DHCP service
> "activity" over the network for the printer. =A0With DHCP "clients,"
> they request an IP address over the network when the lease time-out
> has expired. =A0For servers and printer, these are units that you must
> always find across your network and with their DHCP "clients," these
> may obtain a different IP address at every lease renewal. =A0I have
> encountered times where these never got a valid IP address so they
> were not shown across the network.- Hide quoted text -
>
> - Show quoted text -

My IP address lease extends for two weeks, so the amount of activity
DHCP is adding to the network is neglible. This problem has only
started with the installation of the wireless printer and it only
affects those Windows computers that have the HP wireless printer
drivers and associated Solutions SW installed. It is also installed
on a Mac, but there is no way to see if it is doing the same thing.