[bsamuels]

There's basically 4 different kinds of traffic you'll see coming out of the browser when you're viewing the admin portal.

JNAP Calls - These are used to get or set configuration settings on your router. They'll always be aimed at 192.168.1.1 (or wherever your gateway is) If you're managing your router through a cloud interface, the POSTS will be directed towards linksyssmartwifi.com

Internet Connectivity Heartbeats - These are used to figure out if you have an active internet connection. They'll be aimed at connect.linksys.com

Speedtest Requests - These requests are used to provide support for the speed test functionality. They're typically aimed at linksys.ookla.com or linksysconnect.speedtest.net and are only used to download the flash object that performs the speed test

GUI/html Requests - These are GET requests used to build the html page, aimed 192.168.1.1

However if you set up a cloud account and use the remote admin interface to change your router's settings, youll see lots of WAN-side traffic to the Linksys cloud.