Event Viewer shows high TCPIP activity, is this normal?

[Teflon]

XP Pro, SP3.

System has been slowing down. of late, so I looked at the System log
in Event Viewer and saw Info entries for tcpip every 5 to 10 seconds.
All are the same, 'The system detected that network adapter \DEVICE
\TCPIP(lots of numbers) was connected to the network and has initiated
normal operation over the network adapter.'

Seems like an excessive amount of activity, but have no idea what it
means or if this is a normal amount of activity.

Is this normal? Could that be putting a drain on the system?

 

[John Wunderlich]

m:

XP Pro, SP3.

System has been slowing down. of late, so I looked at the System
log in Event Viewer and saw Info entries for tcpip every 5 to 10
seconds. All are the same, 'The system detected that network
adapter \DEVICE \TCPIP(lots of numbers) was connected to the
network and has initiated normal operation over the network
adapter.'

Seems like an excessive amount of activity, but have no idea what
it means or if this is a normal amount of activity.

Is this normal? Could that be putting a drain on the system?

This isn't normal. You will probably get the same message if you
unplug and plug back in your ethernet cable. This is most likely a
hardware problem -- either a bad cable, connector, modem/router, or
NIC. If you have a long cable run, you might try dropping your
ethernet speed to 10 Mbps from 100 Mbps. The slower speed is more
tolerant to cable noise. You do this by double-clicking on your
network adapter under Device Manager (Start->Run->"devmgmt.msc") then
looking for a "Speed" setting under the "Advanced" tab. Try changing
it from "Auto" to "10/Full" and see if it improves.

HTH,
John

 

[Teflon]

This isn't normal.  You will probably get the same message if you
unplug and plug back in your ethernet cable.  This is most likely a
hardware problem -- either a bad cable, connector, modem/router, or
NIC.  If you have a long cable run, you might try dropping your
ethernet speed to 10 Mbps from 100 Mbps. The slower speed is more
tolerant to cable noise.  You do this by double-clicking on your
network adapter under Device Manager (Start->Run->"devmgmt.msc") then
looking for a "Speed" setting under the "Advanced" tab.  Try changing
it from "Auto" to "10/Full" and see if it improves.

Thanks for responding John. My internet connection is via wireless
(Intel Centrino in IBM laptop), connection manager is IBM's (Lenovo's)
ThinkVantage Connections app. Disconnected and the Event Viewer tcpip
Info messages stopped. Reconnected and the message every 5 seconds
routine started again. All TVC indicators say the connection is
strong and healthy. Any other ideas?

 

[John Wunderlich]

m:

Thanks for responding John. My internet connection is via
wireless (Intel Centrino in IBM laptop), connection manager is
IBM's (Lenovo's) ThinkVantage Connections app. Disconnected and
the Event Viewer tcpip Info messages stopped. Reconnected and the
message every 5 seconds routine started again. All TVC indicators
say the connection is strong and healthy. Any other ideas?

Sorry, no idea. If it's dependably every 5 seconds when connected,
then it may be normal. You might check to see if there is a newer
version of the Connections app.

HTH,
John

 

[Teflon]

Hi.

To determine wether the amount of activity in the log is normal or not
depends on your amount of softwares running that utilize the internet.

Every software you have installed on your system with an "automatic
update" feature will utilize your network connection and end up in the
log.

That is something I did not consider. Do you know of an XP log, or an
app that would create a log of those applications connecting to the
Internet on their own?

I would run a spyware/malware scan just to be certain tho.

I've run Malwarebytes, SuperAntispyware and Avira's Antivir. Nothing
found, nada.

Hitman pro is a free, good software using several different
spyware/malware and anti-virus softwares for as good a scan as
possible.
Depending on how much it finds the scan can take up to 10 hours.

You can download Hitman Pro fromwww.hitmanpro.nl/

/ Ani

Thanks for responding Ani, I will take a look at Hitman Pro. Never
know which scanner will fire the silver bullet.

 

[Twayne]

In

That is something I did not consider. Do you know of an XP
log, or an app that would create a log of those
applications connecting to the Internet on their own?


I've run Malwarebytes, SuperAntispyware and Avira's
Antivir. Nothing found, nada.


Thanks for responding Ani, I will take a look at Hitman
Pro. Never know which scanner will fire the silver bullet.

Check your firewall logs; they should show who's doing the
accessing.

HTH,

Twayne`