On 4/16/2024 1:12 PM, Bill Bradshaw wrote:
I have updates to Win 10 Pro disabled. Over the last 2 days Host Processes has uploaded almost 700 megabytes to my computer. Any way I can figure out what Microsoft is up to and also make it leave me alone?
Computer has
BITS <=== original scheme, may be used as a fallback, or via Powershell command
DoSVC <=== current scheme
for data transfer. A transfer can be "queued up" and resolved
as link bandwidth or user bandwidth settings, permit. You can define
policies to control bandwidth (GPEDIT.msc on pro). The controls on
BITS generally sucked.
I'm not aware of a readout, which displays in plain english, what the
computer is doing. More than one transfer file can be open at a time.
At one time, WU could open sixteen connections at once, but I think
they may have moderated that somewhat. It was causing unfair network usage
in peoples homes (PC#1 updates, PC#2 "can't surf").
C:\Windows\System32 might get its updates via Windows Update. There
are a few services associated with that.
The Metro.App items may independently do updates.
The lock screen, and various advertising campaigns, they
may load async to Patch Tuesday as well.
AV definition updates, there are a couple per day. As well
as the AV program itself getting patched on Patch Tuesday.
We don't know when "MSEdgeUpdate" or whatever passes for that,
does its update. There should be a fair number of those.
There are *LOTS* of little things, but not an infinite number
of them. The link should occasionally be quiet.
On purpose, I run IPV4 only here. I find IPV6 too "chatty" and
I like my Link LED flashing to alert me when real transfers
are under way. I don't want IPV6 ARPing me for nothing.
Your web browser can be running keep-alive on the HTTP connections.
This results in some amount of traffic, even when you have
hands-off-keyboard.
Disconnecting the network cable, really cuts down on nuisance traffic <snicker>.
Microsoft knows that. I hope they are measuring how often I unplug.
The power consumption of a Windows computer is cut in half,
if you disconnect the network cable... and then boot.
Using TCPView or doing traces, the names of the nodes can
be obfuscated (like using Akamai perhaps). And this is why
a PiHole for blocking, may have limited success. It depends
on the person collecting node names, as to whether they
can stop all activity. But Microsoft are quite proud of some
of their activities, which is why "vortex" is still used
as a node name. That's where your browser URLs go.
Telemetry (uploads to Microsoft server) can't be stopped entirely.
DoSvc can serve Windows Update received files, to other
computers in the house. You need to check the settings
for that, if it concerns you. If you clean out the DoSvc cache,
then it cannot serve those files.
BITS does not do caching like that. BITS is your friend.
It's DoSvc which is a full service "bar and grille". If you do Windows Update on Computer #1 for Win10 Pro, if you later boot Computer #2 Win10 Pro,
you may see a couple files shoot from #1 to #2, saving on
downloading the same files from Microsoft a second time.
They will be hash-checked for authenticity.
While DoSvc can serve that file to a random Internet user,
I have not observed such a thing happening, and there is
a setting to stop that and it is not likely to be
the default either. As a lot of home users have "poor upload".
My 15/1 service, serving Windows Update files in the "1" direction
would be silly (too slow). Even if the protocol uses byte-ranges,
the idea would still be silly. If you were on 1000/1000 fiber,
you would make an excellent donor (symmetric). So in some ways,
your candidacy would be similar to original Skype, where "well-connected" machines were valued as "SuperNodes". As if your machine was a
Skype company resource. The Microsoft version of Skype, is centralized
and does not do that. The original Skype was "distributed", reducing
Skype hardware costs. The original Skype was one clever design.
A marvel of crypto.
[Picture] A sampling of what a DoSvc control might look like...
https://i.postimg.cc/ncVrDP7k/W11-Do-Svc-panel.gif
Paul
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)
