flashing ethernet light, asrock z370 extreme4

[caddi daddi]

we came in from a little trip to find an Ethernet light flashing on my extreme4 board with the rig powered down.
I checked my other rigs and none of them do this, is this normal for the board or is it a win 10 thing?
this is the only windows rig in the house, all the others are linux.
the rig is powered off, the psu power switch is on.

 

[Alaric]

Windows 10 is prone to calling home when nobody is looking. Anything interesting show up in Event Viewer? Or better yet, your modem log?

 

[caddi daddi]

being powered off I should think there would be nothing that "could" log.

 

[Alaric]

The modem is powered off? Because W10 does the same thing W8/8.1 does at power off. It doesn't really turn "off". It's a form of hibernation, hence the faster boot times than W7.

 

[(G{in}[AK)TION]]

is it only one light? is it yellow? I believe that is WOL. something you might be able to turn off in the bios.

All my computers do the same thing. its normal. seen the same thing in the computer labs at the schools i used to go to when i was a kid. They were, on average, pentium 3 and 4 desktops.

 

[WhitehawkEQ]

As (G{in}[AK)TION] said, it's normal, when you turn off your PC there is still power on your MB. The NIC is still powered up even with WOL on or off, only way to really turn it off is unplug the power cord

 

[wagex]

almost ALL computers do this it has nothing to do with windows 10 phoning home.

 

[Alaric]

almost ALL computers do this it has nothing to do with windows 10 phoning home.

I checked my other rigs and none of them do this

Mine don't either. Seems we have some rare ones.

 

[wagex]

a quick trip to google will show you its been normal since welllll before windows 10 existed. pretty sure my pentium 3 machine at home does it, i can double check for those curious.

 

[Alaric]

] I don't doubt you in the least. I just assumed (oh oh) that it was Windows. I keep my M$ installs locked down pretty tight, but a lot of the default settings in W10 do questionable things-like turn your rig into an update server for other computers, on or off your network. And since "off" is actually not off...

Part of my modem's system log, during a time I was asleep and my rig was "off". (I redacted the multiple MAC addresses the modem logged in the rightmost column)
TTL=53 ID=14407 PROTO=ICMP TYPE=8 CODE=0 ID=35439 SEQ=1
09/20/2018 07:33:16 AM kernel IN=ppp0 OUT= MAC= SRC=4
09/20/2018 07:58:31 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 08:05:15 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 08:24:51 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 08:51:12 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:05:16 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:11:26 AM kernel IN=ppp0 OUT= MAC= SRC=1
09/20/2018 09:17:50 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:40:22 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:44:14 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:58:32 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 10:05:14 AM kernel IN=ppp0 OUT= MAC= SRC=4
09/20/2018 10:08:36 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 10:33:30 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 11:05:14 AM kernel IN=ppp0 OUT= MAC= SRC=4

 

[EarthDog]

What does that mean? Do you know?

Part of my modem's system log, during a time I was asleep and my rig was "off". (I redacted the multiple MAC addresses the modem logged in the rightmost column)
TTL=53 ID=14407 PROTO=ICMP TYPE=8 CODE=0 ID=35439 SEQ=1
09/20/2018 07:33:16 AM kernel IN=ppp0 OUT= MAC= SRC=4
09/20/2018 07:58:31 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 08:05:15 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 08:24:51 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 08:51:12 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:05:16 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:11:26 AM kernel IN=ppp0 OUT= MAC= SRC=1
09/20/2018 09:17:50 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:40:22 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:44:14 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:58:32 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 10:05:14 AM kernel IN=ppp0 OUT= MAC= SRC=4
09/20/2018 10:08:36 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 10:33:30 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 11:05:14 AM kernel IN=ppp0 OUT= MAC= SRC=4

 

[wagex]

] I don't doubt you in the least. I just assumed (oh oh) that it was Windows. I keep my M$ installs locked down pretty tight, but a lot of the default settings in W10 do questionable things-like turn your rig into an update server for other computers, on or off your network. And since "off" is actually not off...

Part of my modem's system log, during a time I was asleep and my rig was "off". (I redacted the multiple MAC addresses the modem logged in the rightmost column)
TTL=53 ID=14407 PROTO=ICMP TYPE=8 CODE=0 ID=35439 SEQ=1
09/20/2018 07:33:16 AM kernel IN=ppp0 OUT= MAC= SRC=4
09/20/2018 07:58:31 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 08:05:15 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 08:24:51 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 08:51:12 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:05:16 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:11:26 AM kernel IN=ppp0 OUT= MAC= SRC=1
09/20/2018 09:17:50 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:40:22 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:44:14 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 09:58:32 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 10:05:14 AM kernel IN=ppp0 OUT= MAC= SRC=4
09/20/2018 10:08:36 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 10:33:30 AM kernel IN=ppp0 OUT= MAC= SRC=
09/20/2018 11:05:14 AM kernel IN=ppp0 OUT= MAC= SRC=4

so........... you dont have a firewall between your modem and pc?

 

[Alaric]

Just the Windows firewall. Since this is the first time I've actually looked at this, it would appear I'm a little behind in "locking" things. LOL

What does that mean? Do you know?

It looks like my system is doing some communicating with other MAC addresses.

 

[wagex]

well, those messages are just your modem dropping incoming packets because it doesn't have anywhere to deliver them (if your pc was on it would be passing them directly to it hence the need for a firewall)

i would um... get a router, something to keep outside computers from poking directly into the windows firewall, especially for someone worried about security WAY more likely chance of intrusion that way than m$ stealing your stuff.

 

[EarthDog]

It looks like my system is doing some communicating with other MAC addresses.

So that was a "No". Way to needle something that had nothing to do with Windows.

I hate it when bias gets in the way of clear judgement. Seems like a theme these days..

 

[Alaric]

For God's sake, I agree. Maybe not as to the source, though. Is my BIOS communicating to other MAC addresses? Is my NIC calling friendly NICs and chatting them up? The modem logged system activity while the computer was turned off. I'm open to explanations as to what part of the system is doing it if it isn't the OS.

 

[wagex]

For God's sake, I agree. Maybe not as to the source, though. Is my BIOS communicating to other MAC addresses? Is my NIC calling friendly NICs and chatting them up? The modem logged system activity while the computer was turned off. I'm open to explanations as to what part of the system is doing it if it isn't the OS.

well, those messages are just your modem dropping incoming packets because it doesn't have anywhere to deliver them (if your pc was on it would be passing them directly to it hence the need for a firewall)

unless your pc's IP address is the SRC.

you modem has to receive all packets sent to it, what it does with them depends on how the network is going. i can send out a portscan on every pc in your city at once, you modem in its state would show a dropped packet or packets from my ip as the src. it got the msg but couldnt do anything with it.

the PPP0 port is the coax port, so that is traffic coming in on that port. ETH0 is your ethernet line, anything showing up under logs on eth0?

 

[ATMINSIDE]

For God's sake, I agree. Maybe not as to the source, though. Is my BIOS communicating to other MAC addresses? Is my NIC calling friendly NICs and chatting them up? The modem logged system activity while the computer was turned off. I'm open to explanations as to what part of the system is doing it if it isn't the OS.

wagex already said what this is... it's incoming pings to your computer that were dropped because they couldn't be delivered.

 

[Alaric]

unless your pc's IP address is the SRC.

In some instances it is. So now I'm maybe there are Bad Things in my computer, not necessarily Windows things.

 

[caddi daddi]

so I can just ignore it for the most part?