Whats using my Network?
 

Is there any way to determine what is using my internet connection? I can see that there are incoming and outgoing bits, but don't have any programs open that use the internet. I'm using winXP BTW.

I also just ran anti virus and uninstalled a trojan dialer. Don't know if that matters or not.

You can see what ports are open on your computer... run the "netstat" command in the command prompt.

As for complete network analysis, I am unaware of any programs that do this.

If you are concerned about spyware, run a program called spybot: http://security.kolla.de/

Removes most spyware programs and also blocks vulnerabilities in IE... I give it 3 thumbs up!

also get Hijack This.

I've ran spybot, everything is good.

I did however turn on the xp firewall and I am no longer sending any packets, only recieving. It's really annoying not knowing what is causing it. I know if I install and run zonealarm it will ask me if so-and-so is allowed to access my computer.

Is that the only way to find out whats trying to get in?

search for a program called tcpview, it's a nice gui version of netstat.

Good info in this post. I could use it too.

If you REALLY wanna know, you can get a packet sniifer such as Ethereal to look at the traffic on your computer. Depending on the traffic, you might just be updating the network about certain things and so they know you are there.
Also, what is your internet connection, dial-up or high-speed(DSL or Cable)?
If you are on a dial-up, I occassionally have my internet traffic go over my lan at home so that might be another possibility.
To get another look at what ports are open on your computer, dl a program called WinScan. Get your ip, and in the field Address put in your ip and for the subnet put 255.255.255.255
This will get a list of the ports open on your computer, and it might be able to give you what service is being run on that port.

Sorry for all the info, but this is what I and studying in school :p
I personally don't believe in the get a firewall to block all the bad ports because there are ways around that :p
If you need anymore help you can PM me or post another message.

LOL. All that and it could just be his Windows Update program downloading updates quietly in the background... :)

I always check that first.

Or it could be that...
I guess I like hurtin myself by goin the long way :p

Me too. That's experience talking though ... can't tell you how *long* it took me to think of that last time around. MSUpdate packets look screwy and at the time, the destination IP wasn't resolving correctly so it looked REALLY screwy.

won't windows update usually notify you (if firewall setup) when it's updating even if your settings allow it to update automatically?

Nope. If its set to download, it'll just do it. Your firewall might not even resolve the IP into a URL that could be recognizeable.

what should be the results when running netstat?