Quote Originally Posted by jabi View Post
I'm on adsl! I'm connected only when i click on connect button from my connection shortcut (from control panel).

And i'm assigned to dinamic IP adress. Now i'm perfectly understand whay svchost.exe try to access to 255.255.255.255 (thanks to your link)but why my firewall block that every time by itself and give me no option to alow or deny? Same was with Zone alarm and now comodo firewall. I know how to work with this programs,but on this case it's their free will only.
Should i alow that interaction when i learn how? -I think i must alow server to check my IP. Please confirm to me?

About firefox "activitys" ,it's evrything clearly now in my mind.

How i know that my comp downloading??
-- Actually i sow frequently blinking of two monitors in tray and after evry blink i check sum of received and sent bytes. Then i go on firewall options and sow that svchost.exe or system aplication is/are active on internet and bytes comes and goes.
Somtimes it just try to access 255.255.255.255 and that seems ok now,but sometimes is something different(like system aplication).
Frequency of "blinking" is much higher now than before and that make my suspicious.
I have to say that 80% of "blinking"(sent datas) are caused by svchost.exe sending info to 255.255....Maybe if i find the way to alow my firewall to let "backinfo" from server(about ip check) to my comp...maybe this can help hmm?

And i forget to say that i alow only nod32 to update automaticly. Everything else that i'm aware of- i'm updating manualy.I think i know to recognize when my nod updating by simple look on his update status and that's not what make me suspicious in first place.

Thank you very much for links.
All of the above activities are normal, happens on all Windows platforms but more so on XP and Vista! These two "Phone Home" at regular intervals at the very least! Also if you have Automatic Updates enabled, that will be another reason for almost regular, minimal background network activity with occasional file downloads during the times when it is receiving the available/applicable updates.

Your Firewall utilities either configured incorrectly (during setup or later by you) or simply not working right for some reason (program corruption or conflict with the system or even another program).

Of course all these are possibilities that I could only suggest, since your logs looked clean per Jholland, there is not much to say other than:

A) Please provide a log file showing all network activity during one of those "odd times" using a security program or your firewall's own internal monitoring.

or

B) Reformat the system if you can't give us anything to go on yet you are confident something is wrong.

or

C) If none of the other logs indicate a problem, continue using the system as is till some identifiable issue occurs.

It is really odd that your so called always on ADSL connection is requiring you to enter username/password everything you want to surf the net. Are you getting billed by the time you spend online or per connection/day? What icon do you click on in Control Panel?

Curious...

~TL