UDP ssc-agent traffic seems excessive
I started monitoring the traffic on my network using Network Probe. It's given me some insights into which machines are taking a great deal of bandwidth and where some unusual protocols might be coming from. But one Win 2k machine seems to be generating an extreme amount of ssc-agent traffic (UDP port 2967).
I have a Windows network connected mostly by hubs with no established domain controller or formal Microsoft networking servers managing the network. We use different workgroups but that's about it. This machine is usually the master browser for the network. Also, this machine runs as server for Symantic AntiVirus Corporate.
The ssc-agent traffic is about 10x my http traffic, and shows constant activity throughout a several hour sample. 2 GB of traffic in two hours...most other traffic is around 100-200 MB.
So...
What's the ssc-agent protocol used for? Is it a Symantic fuction or a Windows networking issue? Is there a reason this should be commanding so much activity? And is it something I can disable or schedule to run at a specific time?
Thanks for any help.
I have a Windows network connected mostly by hubs with no established domain controller or formal Microsoft networking servers managing the network. We use different workgroups but that's about it. This machine is usually the master browser for the network. Also, this machine runs as server for Symantic AntiVirus Corporate.
The ssc-agent traffic is about 10x my http traffic, and shows constant activity throughout a several hour sample. 2 GB of traffic in two hours...most other traffic is around 100-200 MB.
So...
What's the ssc-agent protocol used for? Is it a Symantic fuction or a Windows networking issue? Is there a reason this should be commanding so much activity? And is it something I can disable or schedule to run at a specific time?
Thanks for any help.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Did you try to change the frequency of the keepalive packets?
ASKER
I've having trouble figuring out exactly why that's generating so much traffic, as everything appears solid in the NAVCE setup. The FAQs seem to state that it should ship out 1k UDP packets to check for needed updates, and then update as necessary. Rather, I'm spitting out 100MBs of traffic every few hours to the same machines over and over again.
I'll probably repost a more specific question towards this problem to see if anyone knows that answer or a solution.