Wireshark · Ethereal-users: Re: [Ethereal-users] ARP-Protokoll

[Richard Urwin <richard@xxxxxxxxxxxxxxx>]

On Sunday 10 Oct 2004 4:56 pm, Freenet-Old wrote:
> Dear Sirs and Mesdames,
>
> I hope you could help me. Yesterday I installed etheral to oberseve
> my Cable-Modem-Internet connection. Why? Since a cuple of weeks I can
> see flashing lights on my modem - indicating network traffic - but no
> program ist open nor the IE is running. My provider shows me 1 GB of
> upload. Hmm. Etheral showed me, that when all known web-applications
> on my PC are closed, 100 % of entwork traffic come from using the
> ARP-Protokol, broadcasting somthing like "who is" or "hihi..."? How
> can I identify the source of the traffic and how can I stop it? It
> would be great to hear from you.

Several well-known viruses do that. I suggest you update your anti-virus 
database and do a full scan.

-- 
Richard Urwin