"Specious" alerts?

[Remah]

@netninja_jk

GlassWire has no “internet access lost” message. I assume that you mean the notification “Internet access has changed” with the message “Internet connection was lost”.

There is advice about this issue in another topic about a different problem:

GlassWire Disconnects Sparodically

We have the Internet Connection Lost alert disabled by default because many PCs disconnect from the network while sleeping, or while idle. To see this alert you would have had to turn it on, and if you find it annoying you can go to settings/security and click “Internet access monitor” to disable it. This alert can be useful for desktop PCs that don’t sleep on ethernet but it can be annoying for notebooks.

Anyway, you reminded me to have look at this again.

@Ken_GlassWire, here’s what I found.

On my laptop, most of the notifications aren’t related to sleep, hibernation or shutdown. Rather they correspond with Windows attempting to set the best DHCP profile for my current WLAN connection. One problem is that my network connection is actually by cable not by WLAN - see the cable connection symbol with the WLAN SSID displayed.

So it appears that the attempt to find the correct WLAN profile registers as a network disconnection. It shouldn’t because the laptop is Ethernet/cable connected:

You can see an example of three GlassWire alerts at 7.32, 9.05 and 11.00am:

You can also see the three sets of two Windows DHCP Client Events also at 7.32, 9.05 and 11.00am:

The first event is that DHCP finds the WLAN SSID for the current profile:
"DHCP has received a Service Set Identifier(SSID) ... for the Network Card with the network address ...":

The second event is that DHCP finds the cached profile for that SSID:
"DHCP has found a match in the cache for Service Set Identifier(SSID) ... for the Network Card with the network address ..."

Here's the detail for the query event:

```` - System - Provider [ Name] Microsoft-Windows-Dhcp-Client [ Guid] {15a7a4f8-0072-4eab-abad-f98a4d666aed} EventID 50067 Version 0 Level 4 Task 3 Opcode 57 Keywords 0x4000000000000000 - TimeCreated [ SystemTime] 2018-12-15T22:00:33.241261100Z EventRecordID 684 Correlation - Execution [ ProcessID] 1516 [ ThreadID] 12852 Channel Microsoft-Windows-Dhcp-Client/Admin Computer MA07 - Security [ UserID] S-1-5-19 - EventData NetworkHintString Jabberwock2.4 NetworkHint A4162626562777F636B623E243 HWLength 6 HWAddress 685D43092135 ````

Here's the detail for response event:

```` - System - Provider [ Name] Microsoft-Windows-Dhcp-Client [ Guid] {15a7a4f8-0072-4eab-abad-f98a4d666aed} EventID 50065 Version 0 Level 4 Task 3 Opcode 55 Keywords 0x4000000000000000 - TimeCreated [ SystemTime] 2018-12-15T22:00:33.241265700Z EventRecordID 685 Correlation - Execution [ ProcessID] 1516 [ ThreadID] 12852 Channel Microsoft-Windows-Dhcp-Client/Admin Computer MA07 - Security [ UserID] S-1-5-19

- EventData 
  NetworkHintString Jabberwock2.4 
  NetworkHint A4162626562777F636B623E243 
  HWLength 6 
  HWAddress 685D43092135 

</details>