The WiFi indicator on my laptop has been flashing about 90% of the uptime on my laptop at idle. It didn't used to be nearly this bad. It's to the point where I wonder if malware is the culprit.

I got a capture from Wireshark. Could someone more knowledgable than me please look at the feed and let me know if anything looks suspicious for an idle system.

I'm running Void Linux w/i3WM and the only thing I could think would be generating frequent network traffic is sshd. But even with that disabled it's still really bad.

172.233.214.246:81/wlp12s0.pcapng
LQ keeps saying invalid file.

i have a program that maybe could help to solve what kind of traffic it is, its called sniffnet.
https://www.sniffnet.net

1 members found this post helpful.

There's two things that stand out, one is SNMP. There's GET requests to 10.0.0.104 from 105. 104 responds it's not evening listening for SNMP. If you use SNMP that's fine - it's just odd to see it on a home network. I couldn't find the OID (1.3.6.1.2.1.25.3.2.1.5.1) with a quick search, but it's probably something from HostResources (hr). Maybe 'snmpget -c public -v1 127.0.0.1 hrStorageSize.1'.

The second thing is UPNP, which is the M-SEARCH/SSDP stuff coming from 10.0.0.105.
https://serverfault.com/questions/64...t-does-it-mean

The rest of the stuff is the usual ARPs and IP6 network stuff. Did you leave a wireless network open? Misconfigured Windows machines around? I don't think it's malware.

1 members found this post helpful.