View Single Post
  #2  
Old July 15th 15, 04:10 AM posted to alt.comp.os.windows-8
Paul
external usenet poster
 
Posts: 18,275
Default Virtual network adapters

Jack Smith wrote:
I was suggested to install Win10 Preview a few months ago. So I
downloaded the iso file and VMware to create a virtual machine with the
new system. Today I found VMware installed two virtual network adapters
and, I'm not sure of this, but they are always sending packets of
information to somewhere. Even if VMware is not running. I checked these
adapters status and saw their network activity in task manager. They are
always on, connected to a mysterious network acting like servers. I
would like to know which files these network adapters are sending and
where to. Is this possible?

Thanks


You can use Wireshark, to watch network traffic. But it cannot
"see" everything. It depends on the networking setup, whether all
traffic is visible or not.

https://en.wikipedia.org/wiki/Wireshark

When you run that, use View : Name Resolution, and tick
the lower four items in the menu. That's so all addresses
will be available as symbolic addresses rather than numeric
addresses.

If the traffic is headed to Akamai, a Content Distribution Network,
you won't know who is doing it. In such a case, I recommend finding
the local Windows service that is doing it, and shut it off. Never leave
an unknown networking situation to fester. While on the
one hand, some "Cloud" synchronization could be going on,
or a Windows Update could be coming in, legitimate traffic
is designed to be robust - if you stop the flow, it can
start up later where it left off. So killing something
which is legit, for safety, shouldn't cause any long term
harm.

If I had a situation like that, the network would be switched off
in about 30 seconds. I don't leave anything running, that I don't
know what it is doing.

Paul
Ads