microsoft / WSL

Issues found on WSL
https://docs.microsoft.com/windows/wsl
MIT License
17.39k stars 819 forks source link

wslservice.exe constantly accessing akamai servers #12174

Open deadcombo opened 6 days ago

deadcombo commented 6 days ago

Windows Version

10.0.22635.4300

WSL Version

2.3.24.0

Are you using WSL 1 or WSL 2?

Kernel Version

5.15.153.1-2

Distro Version

Arch Linux

Other Software

No response

Repro Steps

Install https://github.com/tnodir/fort/. Block internet access to Windows Subsystem for Linux Service (wslservice.exe)

Expected Behavior

No internet connections made unless triggered by my usage or periodic update checks.

Actual Behavior

Image Multiple connections per minute to Akamai servers for as long as the system runs.

Connections resume after granting temporary internet access to the service, suggesting this is not an update check situation.

Why is this flood of connections happening? What data is being transmitted? It doesn't influence WSL operation at all.

Diagnostic Logs

No response

github-actions[bot] commented 6 days ago

Logs are required for review from WSL team

If this a feature request, please reply with '/feature'. If this is a question, reply with '/question'. Otherwise please attach logs by following the instructions below, your issue will not be reviewed unless they are added. These logs will help us understand what is going on in your machine.

How to collect WSL logs Download and execute [collect-wsl-logs.ps1](https://github.com/Microsoft/WSL/blob/master/diagnostics/collect-wsl-logs.ps1) in an **administrative powershell prompt**: ``` Invoke-WebRequest -UseBasicParsing "https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/collect-wsl-logs.ps1" -OutFile collect-wsl-logs.ps1 Set-ExecutionPolicy Bypass -Scope Process -Force .\collect-wsl-logs.ps1 ``` The script will output the path of the log file once done. If this is a networking issue, please use [collect-networking-logs.ps1](https://github.com/Microsoft/WSL/blob/master/diagnostics/collect-networking-logs.ps1), following the instructions [here](https://github.com/microsoft/WSL/blob/master/CONTRIBUTING.md#collect-wsl-logs-for-networking-issues) Once completed please upload the output files to this Github issue. [Click here for more info on logging](https://github.com/microsoft/WSL/blob/master/CONTRIBUTING.md#8-collect-wsl-logs-recommended-method) If you choose to email these logs instead of attaching to the bug, please send them to wsl-gh-logs@microsoft.com with the number of the github issue in the subject, and in the message a link to your comment in the github issue and reply with '/emailed-logs'.
deadcombo commented 6 days ago

/emailed-logs

github-actions[bot] commented 6 days ago
Diagnostic information ``` Found '/emailed-logs', adding tag 'emailed-logs' ```
keith-horton commented 6 days ago

Hi there. We have looked through our code in wslservice and nothing would be generating that traffic. Do you have a plugin installed? (or potentially, something is thread-injecting into this process)

If you share a dmp of wslservice.exe, we can see.