Hi appreciate ur help .. haven't exact stats .. just looking at top 10 conversations or top 10 endpoints over last 15 mins .. at least 7 or 8 of those 'top talkers' always involve my file / print server and a lot of time traffic is coming from Win 7 clients and I suppose from looking at traffic on clients my suspicions are on spoolsv.exe.
I think you maybe right about "status polls" as opposed to print job .. if I print a tiny 1 line text file .. even after job is printed or deleted from queue, traffic seems to continue .. I watched client for 20 - 30 mins after job completed and Spoolsv.exe is still generating traffic .. (I've ruled out virus problems)
I suppose I'm still at 'Baseline' stage and getting to know traffic on my LAN .. only have product about a month ... so maybe this is normal ?? the traffic on my LAN is tiny ... no one is complaining or anything .. maybe clients constantly querying file/print servers for status is normal ?
I'll read some more but appreciate help all the same
L