network monitoring

I have been using CPF for over a year and just recently I have been having problems connecting to certain sites namely YOUTUBE and MSN, the page doesn’t load and the High Severity Threats Monitor just keeps increasing. Only if I turn the Network Monitor OFF, I am able to access these sites but I understand this is not safe.

Welcome to the forum, species :slight_smile:

We will need a little more information if we’re going to help. Please see this post for information on how to post a sample of your log file.

Important - Please read before posting

Toggie

I’m using CFP 2.4 and I can use YouTube and MSN without problems, so I’m sure you’ll be able to sort this out.

Comodo Version 2.4, cable internet connection, Windows XP service pack 2, I log in as Administrator, I am running AVG antivirus w/ Comodo, the firewall is on default settings.

Comodo Version 2.4, cable internet connection, Windows XP service pack 2, I log in as Administrator, I am running AVG antivirus w/ Comodo, the firewall is on default settings.

Thanks for that information species, but could you please post a sample of your log file, showing the blocked connections. The mechanics of doing this can be found in the link I posted above.

Toggie

Here is the link ImageShack - Best place for all of your image hosting and image sharing needs

Hi species, thanks for the screen shot, it helps, but It’s nor really what I wanted :frowning:

If this problem with high fragmentation has just started, it leads me to believe something has changed. What, however, is another question.

You can, if you wish, turn off Protocol Analysis:

CFP/Advanced/Advanced Attack Detection and Prevention\Do Protocol Analysis

Just un-tick the box.

This should stop the log entries for now, but it doesn’t solve the long term problem. Once again, please post the following information in the manner described:

Please help us to help you - Read the following carefully before posting:

What to Post:
When posting requests for help, please include the following information.

  • The version of Comodo Firewall Pro Installed
  • Your Internet connection type (dial-up/cable/Direct connection/LAN etc)
  • Operating system and Service Pack Level
  • How you are logging in to the OS (Admin, User)
  • Other Security applications installed (AV, AS, HIPS etc)
  • Security related applications which have been removed/disabled before installing CFP.
  • Security related application which have been removed/disabled after installing CFP.
  • Detail the problem, such as which applications are running when you have the problem.
  • Please inform us if you have created any custom rules.

Screenshots:
In addition to the aforementioned, it may be necessary to post information related to your CFP rules and logs. The following guidelines will help you understand how this may be done.

Taking and posting screenshots of your environment increases our ability to understand your problem. If you are unfamiliar with the process of taking screenshots, please see this tutorial:

Screenshot-posting for beginners

Where to get Information:

Firewall Rules: Application Monitor.

  1. Open CFP to full screen
  2. Select Security/Application Monitor
  3. The rules are displayed in the main window
  4. Take a screen shot.

Firewall Rules: Network Monitor.

  1. Open CFP to full screen
  2. Select Security/Network Monitor
  3. The rules are displayed in the main window
  4. Take a screen shot.

Firewall Logs:

  1. Open CFP to full screen
  2. Select Activity/Logs
  3. With the mouse, right click anywhere in the main window
  4. From the context menu select ‘Clear all Logs’
  5. Restart CFP or Reboot
  6. If necessary run the problem application
  7. In CFP Select Activity/Logs
  8. Right Click in the Log window
  9. Select ‘Export to HTML’
  10. Save the file with a sensible name
  11. Open the file in a HTML/text editor
  12. Modify your external IP Address if shown in the logs (See Note)
  13. Save the file as HTML (don’t change the format to plain text)
  14. zip/rar the file and post on the forum

Note: When posting log details on the forum, it’s possible they may contain references you your external IP Address. (The IP Address shown in the bottom right of your forum post) In consideration of the privacy issues related to this, we ask you to modify any reference to your external IP Address in the log, using the following example:

Your Address: 123.245.789.123
Modified Address: x.x.x.123

Some things to consider:
Network Monitor rules are hierarchical, that is, they work from the top down. Therefore, a BLOCK rule placed above an ALLOW rule will take precedence.

If you’re having problems with a specific application, check Application Monitor for a rule that BLOCK’s that application.

Thanks

Toggie

I forgot to mention I also used a program called TCP Optimizer to speed up my internet connection, could that have caused the problem?

I forgot to mention I also used a program called TCP Optimizer to speed up my internet connection, could that have caused the problem?

Almost certainly. I imagine it changed the size of the MTU and thus will cause increased fragmentation. My advice is to back out to your old settings, if possible, and don’t use these kinds of programs to try and enhance speed. At best they make no difference, at worst they will trash your system.