cak46

On the wireless machine: Double-click on the belkin signal icon in the system tray. It should bring up a screen where you can choose your network. Select the Belkin_Pre-n .... network. edit: My stupid. You already said you had a good signal. It might be good to check the connection anyway, to be sure. If this is ok, then go to Start menu>Run then type cmd and hit the enter key. Now type ipconfig /all and hit the enter key. Your ip address should be something like 192.168.X.X (x's being numbers. There should be a gateway address as well. If either of these are all zeros (0.0.0.0) then type ipconfig /renew and hit the enter key. Let us know what happens (error msgs, etc.).

I'm trying to figure out your network construct. From what I piece together, and correct me if I'm wrong, it goes: Cable modem to Belkin router then machine A hard wired to Belkin router and Machine B going in wireless to Belkin?

Could be an adware/spyware prtoblem. Download and run adaware from lavasoft: www.lavasoft.de

What operating system are you running on the computers?

There are routers with hubs built in, routers with switches built in (which you mentioned, and single port routers. A firewall router is different than a standard router in that, depending on the firewall router, it will filter proxy, cookies, java, etc as well as stateful packet inspection (which tests incoming packets for validity, so to speak).

Do you have the nics in the XP machine sharing the connection (68.0.1) set to a static speed and duplexing (especially the nic outgoing to the modem)? How is the speed on the ICS machine if the switch is not connected (you mentioned your computer, I'm assuming that the 68.0.3 machine)?

I'm located in rural Maine.

Thats odd. I'm on Adelphia and have not seen any hits on ports 67 and 68. I usually only get about 20-30 udp hits a day total on my "wired firewall router"). For me, I would want to know whos knocking on my back door costantly and I agree that the packets are probably not malicious. peepnklown: If he has multiple machines, why not use a wired firewall with a buit in switch?

bwt1953: Do you get udp packets going to one particular port or multiple ports and multiple source ips? I've noticed when using adelphia speedtest with firefox, the server servicing the request (after the test is done and I have closed firefox altogether) starts sending a string of udp packets moving up sequentially numbered ports.

Does the firewall log give you the ip for the source and destination of the udp packets? (If one or both are your ip don't post them), just let us know.

If you have had system restore running right along, you could try restoring to a date prior to when the problem first began. edit: You can run system restore from safe mode.

Thanks!

Check this out on Microsoft: http://support.microsoft.com/kb/314493

Thats great! With the updates, I would suggest doing just one update file at a time, saving a restore point prior to each update file installation, then reboot to see if all goes well with that particular update file. If it mucks it up, you can restore from the prior point. Deleting the dialup network connection should not bother the op sys. You could forego updating the operating system. The downside to this is that there are security holes (many of them) in the Windows operating system which could expose your system to assorted problems (viruses, hackers, etc.) from the Net. If you run anti-virus and firewall software with the most recent updates, you are better protected. I would suggest doing the security updates but prior to doing the XP sp2 update, it would be a good idea to research if there have bveen problems with your isp and xp Service Pack2.

Some spyware set themselves up to reinstall after a good cleaning. You can start by disabling System Restore then download HijackThis. Run it, save the results in a txt file and attach them to your post. This program shows, in essence, what programs, dlls, etc. load when you start your computer. It gives you the opportunity to delete entries for spyware that do this sort of thing.

Try going to the command prompt and pinging the dhcp server. command to use: ping 62.253.32.20 If this comes back with something like the following: reply from 62.253.32.20: bytes 32........... then your machine can see the dhcp server. If it times out, then your connection to the modem not there. If it timed out, set the speed and duplex of your realtek card to 10mb half duplex then release all then renew all with ipconfig . Are you running multiple connections on the machine? I noticed that the local area connection was labeled local area connection 2.

Gina, Did it wok?

Ditto. And she is a health care worker.................

Gina: You can try dropping the speed and duplex of your nic to 10 half-duplex. Then try the release/renew. If that doesn't work, release the ip, then reboot to see if it picks it up on bootup.

Cobra, What happens when you try to get to the device mgr?

I had done that patch before but it did'nt change things but this time it did the trick! Thanks much! cak46

I'm running win98 SE. I've tried both with scaling and timestamps in assorted configurations, but regardless it still comes back as 65535. The setting I presently have for rwin is 1027840. I've tried many different settings, even lower than the 65535, but it still remains the same according to different test sites. Here are the specifics form web100 from ornl: WEB100 Kernel Variables: CongestionSignals: 1 CurCwnd: 14600 CurMSS: 1460 CurSsthresh: 32120 DupAcksIn: 351 LimCwnd: 95681100 LimRwin: 65355 MaxCwnd: 67160 MaxRTT: 160 MaxRwinRcvd: 65535 MaxRwinSent: 5840 MaxSsthresh: 32120 MinRTT: 50 OtherReductions: 5 PktsOut: 3791 PktsRetrans: 1 RetranThresh: 3 SACKEnabled: 3 SACKsRcvd: 57 SampleRTT: 70 SendStall: 0 SmoothedRTT: 100 SndLimTimeRwin: 8923536 SndLimTimeCwnd: 1505962 SndLimTimeSender: 2726 Timeouts: 0 WinScaleRcvd: 0 WinScaleSent: 0 DupAcksOut: 0 DataPktsIn: 0 Timeouts: 0 CongestionSignals: 1 MinRTT: 50 MaxRwinSent: 5840 MaxRwinRcvd: 65535 PktsRetrans: 1 SmoothedRTT: 100 PktsOut: 3791 My thought is that this is happening at an op sys or Adelphia level (could be a way to limit bandwidth usage). Whenever I try to set my router, Linksys BEFSX41, to 1500 mtu my connection goes south. The analyzer at speedguide shows the same RWIN 65535. Thanks for the help in advance cak46

Good Deal!

Not a clue, but I was wondering, do you have a wired nic in the machine? Could try to connect directly to modem and do same testing to rule out op sys or software issue?

hope someone may have info on this: I've been monkeying around with many of the tweaks for speeding up my connection but have found that my rwin stays static at 65535. Have checked this at a number of different reporting sites but my receive buffer remains the same, no matter what I've changed it to. Could this be a function of Adelphia'ssystem or some other reason? I've been to the speedguide.net and did the recommended update for this problem. rcvwindow is presently set at 1027840 This info is from the improved ORNL web100 site http://whisper.cs.utk.edu:7123/ TCP/Web100 bandwidth test v4.12 click START to begin running 10s outbound test... 257 Kbs outbound running 10s inbound test... 4375 Kbs inbound Web100 Inbound Summary: Packets to your host: 3800 of size 1460 bytes average RTT: 110.0 ms minimum RTT: 60.0 ms Maximum Expected Bandwidth: 8 Mbs Inbound limits: congestion 10% server: 0% your host: 89% Good Data Stream--No retransmits! Your host's receive buffer: 65535 bytes Server's send buffer: 95681100 bytes receive buffer: 65535 bytes Buffer sizes are very important in determining network performance. Larger buffer sizes can help increase thruput. If your buffer is smaller than the remote host, you should investigate increasing your socket buffer sizes. Web100 reports Tweakable Settings as: RFC 2018 Selective Acknowledgment: ON RFC 1323 Time Stamping: OFF RFC 1323 Window Scaling: OFF click START to re-test Anyone have any ideas on this?