Help, can't send e-mails, can't upload on new DSL

General discussion related to Cable Modems, DSL, Wireless, Fiber, Mobile Networks, Wireless ISPs, Satellite, or any other type of high-speed Internet connection, general issues and questions here. Review and discuss ISPs as well (AT&T / SBC, BellSouth, Bright House, CableOne, Charter, Comcast, Covad, Cox, Cablevision / Optimum Online, TMobile, Verizon FIOS, Shaw, Telus, Starlink, etc.)
Post Reply
Pharkas

Help, can't send e-mails, can't upload on new DSL

Post by Pharkas »

Hi,

I'm a new DSL user, W98, no router, no Firewall.

Browsing works fine but I can't send e-mails and I can't upload files. I called the support line from my provider every day last week but they can't figure it out.

Regarding e-mails : When I connect via dialup, I can send OK so it's not a software config problem.

Regarding FTP : I am able to send small files (1K max) but nothing else. Everyting works well via dialup.

The support guys mentioned it could be MTU but didn't explain why or how and I don't know what this is... It seems the outgoing traffic is somehow blocked.

I'm going crazy with this and desperately need help as I don't know what to do anymore. I'm a web developper so uploading is extremely important.

Thanks

Fred D'Amico
User avatar
mnosteele52
Posts: 11913
Joined: Tue Jul 24, 2001 12:00 pm
Location: Chesapeake, VA

Post by mnosteele52 »

Welcome to Speedguide :D , let's start with the basics, please read here so that we can properly help you. :)
Pharkas

My settings ...

Post by Pharkas »

Thanks for the heads up !

I have PPPOE.

NB - While using TCPOptimizer Max MTU Ping test, it times outs at 1125 bytes (& up) everytime, with several different sites.

Where/how can I fix this ?

Thanks,

****************
TCP options string = 0204058601010402

MTU = 1454
MTU is not fully optimized for broadband. Consider increasing your MTU to 1500 for better throughput.

MSS = 1414
Maximum useful data in each packet = 1414, which equals MSS.
MSS is not fully optimized for broadband (although it might work well for slower connections). Consider increasing your MTU value.

Default Receive Window (RWIN) = 34848
RWIN Scaling (RFC1323) = 0 bits
Unscaled Receive Window = 34848
For optimum performance, consider changing RWIN to a multiple of MSS.
Other values for RWIN that might work well with your current MTU/MSS:
520352 (MSS x 46 * scale factor of 8)
260176 (MSS x 46 * scale factor of 4)
130088 (MSS x 46 * scale factor of 2)
65044 (MSS x 46)

bandwidth * delay product:
Your RcvWindow limits you to: 1393.92 kbps (174.24 KBytes/s) @ 200ms
Your RcvWindow limits you to: 557.568 kbps (69.696 KBytes/s) @ 500ms

MTU Discovery (RFC1191) = ON

Time to live left = 36 hops
TTL value is ok.

Timestamps (RFC1323) = OFF

Selective Acknowledgements (RFC2018) = ON

IP type of service field (RFC1349)= 00000000
User avatar
mnosteele52
Posts: 11913
Joined: Tue Jul 24, 2001 12:00 pm
Location: Chesapeake, VA

Post by mnosteele52 »

OK first you need to get your MTU right, it should be 1492, look in my help & tips link for some fixes, once we get that straight we can work on the rest of your settings. :) ;)
User avatar
Bob Carrick
Advanced Member
Posts: 705
Joined: Wed Sep 26, 2001 5:20 pm
Location: Ottawa, ON, Ca

Post by Bob Carrick »

Actually it sounds like your MTU needs to be lower, not higher.
Bob
www.carricksolutions.com - The largest PPPoE / Broadband Help Website.
Pharkas

MTU mods

Post by Pharkas »

Hi,

I used the TCPO, modifed my MTU to the recommended value, restarted and I still get 1454 after testing ? I tried a few times...

This 1454 seems to correspond to the value of my MaxFrameSize in the registry.

Is this making any sense or did I not understand how to do these mods ?

Thanks for your help and time !

FD
User avatar
Bob Carrick
Advanced Member
Posts: 705
Joined: Wed Sep 26, 2001 5:20 pm
Location: Ottawa, ON, Ca

Post by Bob Carrick »

EnterNet sets a default MTU of 1454.
The Registry Key doesn't match exactly, but these instructions always seem to do the trick.
1) Go to "Start" menu -> Click "Run" -> Type "Regedt32.exe" -> Click "OK"
2) Go to this Registry Key HKEY_LOCAL_MACHINE/ System/CurrentControlSet/
Services/Class /Net/000n/Ndi/ params/MaxFrameSize/"max" ....Where "n" is a number, but it will be a 00 number
3) Double click on "max" and change the value from 1454 to 1492.
4) Close RegEdit
5) Right Click on "Network Neighborhood" (My Network Places)
6) Choose "Properties"
7) Click on the PPPoE adapter (Efficient Networks)
8) Click "Properties"
9) Click "Advanced" tab
11) Click "Max Frame Size" -> Change to MTU you desire
12) Click "LCPMRU" -> Change to match the MTU you changed in step 11
13) Click "OK"
14) Done!

Win2K has the option in a slightly different place.
1) Right click the Local Area Connection for Your PPPoE adapter, choose "Properties".
2) Click "Configure" -> Click "Advanced" tab.
3) You will then see the options listed (as above)
Bob
www.carricksolutions.com - The largest PPPoE / Broadband Help Website.
User avatar
dannjr
Posts: 2233
Joined: Tue Jul 11, 2000 12:00 am
Location: Chicago

Post by dannjr »

Stalls, freeze up's and Slow downs: Assigning a IP address Win9x

This is caused by DHCP time in Windows 98 & 98SE/ME
This will or can happen in Win2k also
Do this
Open control panel

Open Network

Look for the first entry in the scroll box marked TCP/IP, that is associated with a hardware ethernet card (ignore dialup, AOL and VPN type bindings).

Select it and press properties

Select IP address from the tab

Is Obtain IP address automatically checked? if so, change that to Define IP address and enter 196.54.1.10, and 255.255.255.0, into IP address and subnet mask fields respectively
This assignment of a harmless local IP address to the TCP/IP settings bound (connected) to your network adaptor, will stop the in-built DHCP services from waking up every 10 minutes to look for a DHCP server so that it can "fill in the blanks".

Also if this is Win98SE do this Updates
Microsofts NDIS fix for Windows 98SE found here on the Microsoft updates page of our site

getting your MTU up is only part of the fix. Enternet also shows the DNS IP address's that can also be added to the properties
PaddyG
Member
Posts: 20
Joined: Mon Nov 19, 2001 7:27 am

Post by PaddyG »

You know, I had exactly this problem when I changed to a new ISP. I was using a Zyxel 630 USB modem, when I installed a NIC and they sent me a Zyxel 642R router, all my problems disappeared. It might not be at all related, but what sort of modem do you have?
Strength and Honour
Pharkas

Still can't figure it out...

Post by Pharkas »

Hi,

I still haven't figured the problem out.

- I can't send e-mails
- I can't upload anything bigger than 1K
- I can't submit this form without using my dialup

It seems that all outgoing traffic is limited to 1K. I need help.

- I can send fine using dialup.
- I can send fine using DSL on another computer in the office (no router).

I need help as I don't know where to turn anymore....

Thanks,

Fred
User avatar
mnosteele52
Posts: 11913
Joined: Tue Jul 24, 2001 12:00 pm
Location: Chesapeake, VA

Post by mnosteele52 »

Have you scanned for spyware? If not look at my Help & Tips link for information on removing spyware. :)
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

Hey, I have the nearly the same problem Pharkas, except I'm on cable. I've had this problem ever since I got cable, a month ago. The techs from mediacom couldn't figure my problem out, so I've been at it myself, trying to figure out the wonderful world of broadband for myself. From speed tests on chi.speakeasy.net, I generally get anywhere from 750-1100 kbps downstream (capped at 1500), but only 13kbps (128 cap) upstream. I ran tcpip analyzer, and here are the results:

I'm not running anything like PPPoE, I just have a NIC (DLINK DFE-530TX) hooked up to my surfboard.

TCP options string = 020405b40103030001010402

MTU = 1500
MTU is fully optimized for broadband.

MSS = 1460
Maximum useful data in each packet = 1460, which equals MSS.

Default Receive Window (RWIN) = 64240
RWIN Scaling (RFC1323) = 0 bits
Unscaled Receive Window = 64240
RWIN is a multiple of MSS
Other values for RWIN that might work well with your current MTU/MSS:
513920 (MSS x 44 * scale factor of 8)
256960 (MSS x 44 * scale factor of 4)
128480 (MSS x 44 * scale factor of 2)

bandwidth * delay product:
Your RcvWindow limits you to: 2569.6 kbps (321.2 KBytes/s) @ 200ms
Your RcvWindow limits you to: 1027.84 kbps (128.48 KBytes/s) @ 500ms

MTU Discovery (RFC1191) = ON

Time to live left = 53 hops
TTL value is ok.

Timestamps (RFC1323) = OFF

Selective Acknowledgements (RFC2018) = ON

IP type of service field (RFC1349)= 01011100
Precedence (priority) = 010 (immediate)
Delay = 1 (low delay)
Throughput = 1 (high throughput)
Reliability = 1 (high reliability)
Cost = 0 (normal cost)

I'm running zonealarm if that helps.

I can't send any type of email attachments, this is annoying. I downloaded cablenuts, tweaked the settings similar to what Lobo has, followed the directions (most of them I think, it's 330 am and I'm beginning to get groggy, playing with the registry is fun! I can't believe my computer still works properly!). I Killed spyware with PC Doorguard, Spy-Bot, Adaware. I Kind of liked to do this the hard way rather than let the techs at mediacom tell me what to do, because I like to learn these things, but I'd like to see some reward for my efforts. Especially after visiting my friend's house a few hours ago (he lives about 3 miles away). He just got cable yesterday and he's getting consistent upstream performance of 100+kbps, very close to the cap (I ran the speed tests to the same site as the one I used on my computer). The only difference is that he is running WinMe and I've got XP, and he has an rcaDCM305, the model of modem I changed out in favor of a Surfboard 4200 in hopes of solving this wretched problem, but to no avail. Please help you guys, I really don't want to go back to the inhumane brutality of Dialup, as there is no other option in this podunk little mountain town, but I will if I can't even send my resume to prospective employers!
cyberskye
Senior Member
Posts: 4717
Joined: Wed Jan 10, 2001 12:00 am
Location: DC

Post by cyberskye »

boot up your machine. Before you do anything else open a command prompt and do netstat -an. Try it again 2 minutes later - again, before you open any other apps. Could help rule out stuff phoning home.

Seems odd that your downstream is so much better (closer to cap) than your up.

Skye
anything is possible - nothing is free

:wth:
Blisster wrote:It *would* be brokeback bay if I in fact went and hung out with Skye and co (did I mention he is teh hotness?)
:wth:
User avatar
mnosteele52
Posts: 11913
Joined: Tue Jul 24, 2001 12:00 pm
Location: Chesapeake, VA

Post by mnosteele52 »

gtb77 your problem could very well be Zone Alarm, the first thing i would suggest is uninstalling it then go to their site for instructions on removing all the left over registry entries (VERY IMPORTANT). Then see if the problem goes away, then I would suggest using Sygate as your firewall, it's much better than ZA and doesn't have all the problems associated with it as ZA does. If that doesn't work please post back and we can go from there. :) :D
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

Ok, I'll try that out (get rid of za) and post back here with the results. cyberskye, I ran netstat -an, but I don't know what I'm looking for. There are a bunch of things "listening" and some things that say "close/wait", but I don't know what any of this means. Thanks a lot you guys!
cyberskye
Senior Member
Posts: 4717
Joined: Wed Jan 10, 2001 12:00 am
Location: DC

Post by cyberskye »

That shows you the state of all of your network connections. I was looking for established. Just a thought to rule out stealthware that might be phoning home and using your upload.

Curious - which port numbers are LISTENING?
anything is possible - nothing is free

:wth:
Blisster wrote:It *would* be brokeback bay if I in fact went and hung out with Skye and co (did I mention he is teh hotness?)
:wth:
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Post by YeOldeStonecat »

I've run into that several times way back before MTU settings were available on routers firmware....since they've become available, and set to 1492 or so, the problem has always gone away.

But you don't have a router in the picture, on the cases where I've run into that, two files from Speedguides download section work for me 95% of the time.

The SGuide_Tweak
and
The MS Vtcp.386 fix

Both available here:
http://www.speedguide.net/Cable_modems/ ... ches.shtml

It's those two files which led me to Speedguide....back when Linksys was rolling the first Etherfast routers off the assembly line...I was installing one on a network and I ran into the problem where any e-mail client, be it Outlook Express, Outlook, Nutscrape Mail, Act, whatever, the mail clients could download fine, but if anyone uploaded an e-mail with any sort of attatchment...large or small, I'd get errors relating to SMTP. Yet they could send e-mail by itself fine, with no baggage.

In working with Linksys support, again, this is way way back a few years in their first few versions of firmware, well before they introduced MTU settings to their firmware, anyways, the Linksys support guy told me to come to Speedguide.net and download a couple of tweaks....that was my first time here. And those tweaks worked for me, and kept on working on other clients....until MTU became available on the firmware, at which point the tweaks weren't needed.

Also a good idea to run all your Windows Updates, and get the latest DUN 1.4.
MORNING WOOD Lumber Company
Guinness for Strength!!!
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

Hey, sorry I haven't been on here for a while, was gone all day yesterday and this is my first time back on the computer. Skye, these are the ports listening:

TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1027 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3130 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3136 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3138 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3139 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3140 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3141 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3143 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3149 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3150 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3151 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3162 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3166 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3167 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5000 0.0.0.0:0 LISTENING

Also, port 139 off of my IP is listening, these ports are listening too:

TCP 127.0.0.1:3001 0.0.0.0:0 LISTENING
TCP 127.0.0.1:3002 0.0.0.0:0 LISTENING
TCP 127.0.0.1:3003 0.0.0.0:0 LISTENING
TCP [::]:135 [::]:0 LISTENING 0
TCP [::]:1025 [::]:0 LISTENING 0

There are more things that show up under UDP, but they are not listed as doing anything. I have used adaware, pc doorguard, and spybot to look for spyware and I have erased what I have found. The most serious of these was a trojan called "f@#$door.server". I haven't found anything lately. Also, if it helps, before I had removed this stuff, a person from mediacom (my cable provider) called (after shutting my modem down) and said that my old dialup ISP's mail servers were getting bombarded with thousands of undeliverable email messages from my IP. After I got pc doorguard this stopped, but I still have to wonder if I got everything. Alright, I'm off to get sygate and figure out how to cleanly get rid of zonealarm. I'll try those two files, YeOldeStonecat, thanks.
cyberskye
Senior Member
Posts: 4717
Joined: Wed Jan 10, 2001 12:00 am
Location: DC

Post by cyberskye »

I've been called paranoid before, but after finding a trojan I would format my hdd. As you mentioned, it is hard to be certain that everything is gone.

Skye
anything is possible - nothing is free

:wth:
Blisster wrote:It *would* be brokeback bay if I in fact went and hung out with Skye and co (did I mention he is teh hotness?)
:wth:
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

As would I, usually, but this isn't my computer, it's my dad's and if I mention the word "reformat" or any of its relatives, I'll likely have to find a new place to live. I tried out mnosteele's idea about the firewall, removed zonealarm and all of its registry entries (like the instructions said), but that didn't work either (although I do like this firewall better than zonealarm, thanks). Oh, and stonecat, I already installed the sguide tweak for xp, and that fix (vtcp.386) is only for 95,98,ME and I have XP(home). I have also installed this NIC and cable modem on my computer downstairs (fresh install of XP Pro, it had never even been on the net before) and I got about the same results. I'm beginning to think that this isn't a problem with my computers, rather that somewhere down the line there is a noise problem and my ISP is very slow about fixing it.
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

Hey, I found a trojan in cablenut408.exe! It is a schoolbus server! WTF! I just bloody found it!
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

Oh, and another in a file I downloaded from McAfee to look for bugbear! Stingersetup.exe, and the trojan is called Net Down. Wow, I go to mcafee to get help for finding a trojan, and they give me one instead. That's great.
User avatar
mnosteele52
Posts: 11913
Joined: Tue Jul 24, 2001 12:00 pm
Location: Chesapeake, VA

Post by mnosteele52 »

Originally posted by gtb77
Hey, I found a trojan in cablenut408.exe! It is a schoolbus server! WTF! I just bloody found it!


Where did you download it from? Are you using any AV software? :)
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

I don't know what specific site I downloaded it from, I used one of the links from this forum (it was in one of the posts in the tweaking forum here, I think suggested things for newbies to do. I think it was a link to the cablenuts site). I'm running McAfee virus scan, but I found the trojan when I scanned with PC Doorguard (http://www.astonsoft.com). I did a google search on schoolbus, and it is a netbus thing. I uninstalled cablenuts after doorguard cleaned it.
User avatar
mnosteele52
Posts: 11913
Joined: Tue Jul 24, 2001 12:00 pm
Location: Chesapeake, VA

Post by mnosteele52 »

Well McAfee is the worst AV app and it could be blocking your emails, I can promise you that the trojan didn't come from our site at DSLnuts unless it somehow was masked as a download. :) ;)
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

Just so you know, I don't know too much about viruses and trojans, but this was what the program told me. I don't know if something on my computer infected the file somehow, or if I downloaded it like that. I don't know what's going on. I am kind of freaked out right now though (too much caffeine).
User avatar
mnosteele52
Posts: 11913
Joined: Tue Jul 24, 2001 12:00 pm
Location: Chesapeake, VA

Post by mnosteele52 »

I would suggest downloading the FREE trial of Norton Antivirus 2003 and update it and run a scan, but first uninstall McAfee. :) :D
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

I just downloaded it from this site, to be sure, and scanned it as soon as I got it. This is the site:

http://www.dslnuts.com/software.shtml

here is the link that I used:

http://www.student.ipfw.edu/~gottjl01/f ... nut408.exe

As I said, I don't know what's going on, but as soon as I dl/d it I scanned it, and it came up infected again. I downloaded another executable file (winzip.exe) to the same folder to check if somehow files coming in to my computer were being infected on my end, but only cablenut408.exe is infected. Here's a copy of the logfile from doorguard:

PDG v.2.16.0.0
18:39.44 - December 20, 2002, Friday
Memory scan.
Virus proccesses not detected.
Started applications scan.
Virus applications not detected.
Registry and system file scan.
File C:\WINDOWS\win.ini did not contain suspicious records.
File C:\WINDOWS\system.ini did not contain suspicious records.
Virus "schoolbus.2.00.Server" detected in C:\Programs\cablenut408.exe
18:39.46
Scan completed
Files scanned: 35
Files infected: 1
Scan speed: 17 files per second.
Please regularly update PDG!
-
-I'm not trying to be a jerk about this, you're nice and you're helping me out, but if there's a problem with this file I want you to know. Thanks. :)
User avatar
mnosteele52
Posts: 11913
Joined: Tue Jul 24, 2001 12:00 pm
Location: Chesapeake, VA

Post by mnosteele52 »

Well then I would HIGHLY suggest you install Norton and scan with it, I just downloaded it and scanned it with Norton and it found nothing. Either McAfee is giving you a false alarm or the trojan is on your pc and infecting things. :)
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

Ok, sorry to be a pest :) . McAfee isn't picking it up, only that PC Doorguard program. I got alarmed because the new definitions for that program just came out today. All right, thanks. :)
User avatar
mnosteele52
Posts: 11913
Joined: Tue Jul 24, 2001 12:00 pm
Location: Chesapeake, VA

Post by mnosteele52 »

OK, well you might try PestPatrol, it finds trojans, spyware.... basically all the "bad" stuff and I have never had a false alarm with it. There is a free version, also you AV app should detect trojans. :) :D
User avatar
dannjr
Posts: 2233
Joined: Tue Jul 11, 2000 12:00 am
Location: Chicago

Post by dannjr »

Coffeeee Kwel. you might need a ton by the time you finsh reading this...
I checked all the mirrors and the main download so I know its not comming from us.

There are a couple of trogens and a couple of Virus's crippling the DLL files of all anti virus programs..
After reading this thread you might have more than one thing going on...
If you have a way to backup all your Important Data start thinking about it now.. .DOC.s should be safe but make sure all macros are disabled if you open them.

Im not gonna tell you to get rid of McAfee everyone is entitled to there own ideas on what makes things safe..

I suggest that you at least unload McAfee and try AVG or another antivirus utility that maynot have been hit on your system yet..
there is a known Virus and trogen that can disable anti virus after being hit.

If you disable the firewall and McAfee. Do you still see activity on the Modem or NIC when nothing is going on.
If so then open a command line (DOS Window) and type
netstat -a
That will tell you exactly what your connecting to

Do you see anything in the Control panel under Add/Remove programs. that your not sure of Uninstall it if so..
If you see LOP its killing you.

Run Lavasoft Ad-aware to clear up all forms of connections and spyware. Make sure its the latest version.
Or what mnosteele pointed to. Spyware is a virus no matter what others say.

Ask your ISP if they have a different DNS you can at least try till the problem is cleared up.. Some DNS IP address's are broke.. I know Im dealing with one myself right now.
A bad DNS can have the same effect on upload as well as stopping FTP transfers..
Netstat -a might be your answer if you see a large port open between 24000 and 65535 its probably the trogen or could be a trogen.
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

Ok, sorry to cause a ruckus. I agree about spyware being a virus, when I found out that kazaa likes to load spyware in with its program I got angry and uninstalled it. I've been running adaware, pc doorguard, spybot, and I'll have to get pest patrol too. Yeah, I can see activity when nothing is open, the tech that came to my house told me that that was normal. Hmm..., mediacom told me to download doorguard too, maybe that's not so good of a program. I'm starting to wonder if cable is really worth the trouble, I never had any of these worries on dialup, I seem to spend more time these days trying to figure out how all this stuff works than actually using the internet for fun, LOL :) . Anyways, sorry about the alarm, I thought I had found a virus breakthrough. Perhaps I should switch to decaf before I react like Tweek on south park again :) . Thanks for all your help again.
User avatar
dannjr
Posts: 2233
Joined: Tue Jul 11, 2000 12:00 am
Location: Chicago

Post by dannjr »

First off the Heck with Decaf. The cablenut program wouldnt have been wrote with it.. Need lots of caffeen...

One thing that I do know. A good portion of people that first get on broadband is that they find all the junk that filtered in with there old dialup its not unusual..
Its also not unusual to end up reloading the system within the first moth or so because of old bugs.. You might want to consider that... If you think about all the ime you have put in trying to hunt down this bug(s) you could have reloaded in less time..

I know thats not always the answer.. But in your case and a bvery few others you can end up with the Junk controlling you and not you controlling it.

If you find the junk keep a small log on it.

You may also have a registry thats been crippled. like cleaned to well.. Either way it looks like your fighting a uphill battle with all this.. Ide say put a packet sniffer on the system but not sure youd be able to read it at this point and youd need to learn how to use it and so on.

Cable modems will show activity it depends on the type of activity and how active the NIC really is.. Cable companies send out packets to check for open server ports keep alive packets and so on. If thats the activity you see thats normal its the
netstat -a
that will tell you whats going on
heres a netstat reading

Active Connections

Proto Local Address Foreign Address State
TCP groundcontrol:epmap groundcontrol:0 LISTENING
TCP groundcontrol:microsoft-ds groundcontrol:0 LISTENING
TCP groundcontrol:1025 groundcontrol:0 LISTENING
TCP groundcontrol:1033 groundcontrol:0 LISTENING
TCP groundcontrol:3021 groundcontrol:0 LISTENING
TCP groundcontrol:3027 groundcontrol:0 LISTENING
TCP groundcontrol:5900 groundcontrol:0 LISTENING
TCP groundcontrol:1032 groundcontrol:0 LISTENING
TCP groundcontrol:5180 groundcontrol:0 LISTENING
TCP groundcontrol:netbios-ssn groundcontrol:0 LISTENING
TCP groundcontrol:1028 groundcontrol:0 LISTENING
TCP groundcontrol:1028 192.168.0.2:netbios-ssn ESTABLISHED
UDP groundcontrol:epmap *:*
UDP groundcontrol:microsoft-ds *:*
UDP groundcontrol:1030 *:*
UDP groundcontrol:1862 *:*
UDP groundcontrol:3023 *:*
UDP groundcontrol:3791 *:*
UDP groundcontrol:3836 *:*
UDP groundcontrol:4620 *:*
UDP groundcontrol:netbios-ns *:*
UDP groundcontrol:netbios-dgm *:*

anything more than this and you might have a problem
I wont go into true details on this but if you see IP addresssss or namer servers other than the name of your machine with the words established you need to hunt that down
Ports in the upper range are nasty unless your running a game


Dont give up on the connection its a pain now but in the long run with everything running right youll look back and ask why you didnt do it sooner

I take worms and virusss serious thats why I chked all the downloads.. If you got the Cablenut download off of a link here. other than to goto one of the official sites I would like to know..
We dont want someone giving out garbage

Thanks
gtb77
New Member
Posts: 12
Joined: Wed Dec 18, 2002 4:23 am

Post by gtb77 »

Ok dannjr, thanks for the info. I had no idea there were such things as false alarms in avp. I checked netstat, I have no items "established", and the highest port number I have seen is 9745, and that's for a p2p called gnucleus, something my uncle put on here when he was here last. That's the problem, this isn't my machine, it's my father's and he and my uncle put programs on it, and my dad enters contests all the time on the web, so I don't know where half of this comes from. I mentioned the idea of a format earlier tonight, and that was not received well at all by him. I am tempted to take this NIC, cable modem, go downstairs and put them in my computer, after doing a complete fdisk/format of MY machine and then see if I have these upload problems with a clean install. But I only have five hours now, don't think I'm up to task for such an undertaking. I think I'll keep at trying to get this to work, if nothing else, I'll learn something, and that's always good. Thanks mnosteele52 and dannjr. I better reinstall cablenut now, too. I can tell this thing is running slower.
User avatar
dannjr
Posts: 2233
Joined: Tue Jul 11, 2000 12:00 am
Location: Chicago

Post by dannjr »

gtb77
Chk your PM (private message)
I just realized this isnt your thread..
Post Reply