excessive GET: resources\WPAD.PAC requests

[tmpease]

I'm getting alot of Web Proxy Auto Discovery Proxy Auto Configuration (in history window as GET:resources\WPAD.PAC) traffic.

As far as I know, IE on the clients is not set to auto-configure.

There is no mention of the WPAD.PAC file or how to use it (or not) on microsoft's knowledge bases or on the wingate forums, so I need some help here.

Thanks in advance.

[adrien]

Hi

Not only IE sometimes makes such requests. Can you track down which machine is making the requests and see what's running on it?

Adrien

[tmpease]

Hi

Not only IE sometimes makes such requests. Can you track down which machine is making the requests and see what's running on it?

Adrien

I know which machines are making the requests -- others aren't making the requests. There is nothing unusual running on them (as far as I can tell from the Task Manager). I've run virus scanners and spyware scanners on machines -- everything looks fine.

How would I discover the process issuing the traffic? What net tools are required?

[adrien]

Hi

You can find out what app is making a certain connection by several methods.

1. using netstat and taskman.exe

if you're on XP, you can run from the command line "netstat -ano" that will print out the process id from each connection which you can match with the process id shown in task manager.

2. Using some other tool

for instance PortMon which ships as part of our NetPatrol product.

Adrien