Constant network activity?

Maybeso · 2009-01-31, 21:22

I've got a constant data stream of almost 1 Mbps in each direction on both my boxen. Not between them, going out. I suspect this has been happening for a couple days, but I noticed it while I was upgrading from 24.x to 25.8, so I'm asking here first. (besides, you guys are smart :)

Setup - two boxen connected via router to my cable modem. Older box has been running prime95 for years, finally got around to upgrading. New box is a prime95 virgin. Figured I would set up the new account, upgrade, then install on the new box.

I read the upgrade page and went thru the steps, got to downloading the software. Started fast, then hung. Tried the new box and the same thing happened. Checked the network throughput - a steady stream of data, but in both directions. And no progress showing on the popups. Not normal for a download. Cancelled both and tried each separately a couple times. Finally worked for each box. The network activity continued, which bothered me.

I finished the upgrade and the install. I poked around in the new interface - really cool by the way - and read something about a communication thread, and something else about my stats being updated regularly on the server. I figured that was it and left.

Today I checked again - constant 1 Mbps each way on both boxen.
Tried stopping P95 on each, no change.
Tried rebooting each, no change.
Did a virus scan, nothing and no change.
My next step is to tediously compare the process lists in task manager.
Then maybe dig through system logs.

I haven't noticed anything else wrong.
Anyone ever seen something like this? It's not even trying to hide.

- Bruce

Maybeso · 2009-01-31, 23:05

I recently switched from a wired-only linksys router to a wireless linksys router. But the wireless one came with a network monitor app that keeps logs. I installed the security, did the password and key thing. No devices other than mine have ever shown up on screen or in the logs.

Figured I should mention that earlier rather than later.

potonono · 2009-01-31, 23:07

It's likely not related to Prime95. From a command prompt, you could do a 'netstat' (or 'netstat -b' if supported) to see a list of programs that are currently using your network. I'd suggest googling for a freeware network monitor if you really want to track down what's causing the traffic.

jasong · 2009-02-06, 22:06

Sounds to me like someone is taking advantage of an unsecured wireless line to do some p2ping. You might want to try going back to just a wired connection for a few minutes to a few hours. If turning off the wireless stops the action all of a sudden, then it's probably a bandwidth thief. Downloading from the net might take a few seconds to slack off if someone's stealing bandwidth(has to do with the nature of p2ping), but uploading should just stop cold if it's a wireless thief. Be sure everyone in the house knows not to get on the computer during that time, since that might confuse things.

potonono · 2009-02-07, 02:54

The complaint was inbound/outbound traffic on two specific machines, not just an increased amount of traffic over the router. If that were the case, the router logs would definitely show another machine connecting. It's much more likely a valid program on each machine that is contacting servers for updates, though malicious programs could always be a culprit if you're not careful about what gets installed.

Maybeso · 2009-02-07, 20:52

Thanks for your ideas guys, its helped me to focus my hunt. I couldn't figure how to turn off the wireless part of my router, so I limited it to 2 connections (me) for a while. That stopped it. It was some app on both machines that needed a generic connection to get outside. If I manage to track down which app and how I got it I will let you know. :-)

Thanks again,
Bruce

2009-01-31, 21:22	#1
Maybeso Aug 2002 Portland, OR USA 274₁₀ Posts	Constant network activity? I've got a constant data stream of almost 1 Mbps in each direction on both my boxen. Not between them, going out. I suspect this has been happening for a couple days, but I noticed it while I was upgrading from 24.x to 25.8, so I'm asking here first. (besides, you guys are smart :) Setup - two boxen connected via router to my cable modem. Older box has been running prime95 for years, finally got around to upgrading. New box is a prime95 virgin. Figured I would set up the new account, upgrade, then install on the new box. I read the upgrade page and went thru the steps, got to downloading the software. Started fast, then hung. Tried the new box and the same thing happened. Checked the network throughput - a steady stream of data, but in both directions. And no progress showing on the popups. Not normal for a download. Cancelled both and tried each separately a couple times. Finally worked for each box. The network activity continued, which bothered me. I finished the upgrade and the install. I poked around in the new interface - really cool by the way - and read something about a communication thread, and something else about my stats being updated regularly on the server. I figured that was it and left. Today I checked again - constant 1 Mbps each way on both boxen. Tried stopping P95 on each, no change. Tried rebooting each, no change. Did a virus scan, nothing and no change. My next step is to tediously compare the process lists in task manager. Then maybe dig through system logs. I haven't noticed anything else wrong. Anyone ever seen something like this? It's not even trying to hide. - Bruce

2009-01-31, 23:05	#2
Maybeso Aug 2002 Portland, OR USA 2×137 Posts	Additional info I recently switched from a wired-only linksys router to a wireless linksys router. But the wireless one came with a network monitor app that keeps logs. I installed the security, did the password and key thing. No devices other than mine have ever shown up on screen or in the logs. Figured I should mention that earlier rather than later.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
should cpu activity be 100% for LL tests	wildrabbitt	Software	2	2015-12-24 15:30
activity	bsquared	Forum Feedback	9	2013-02-01 23:59
Decrease in activity?	10metreh	Aliquot Sequences	8	2010-07-15 14:49
Second PC, no activity	frigo	Teams	4	2005-07-22 12:45
disk activity	tha	Software	1	2004-06-08 09:53

2009-01-31, 23:07	#3
potonono Jun 2005 USA, IL 193 Posts	It's likely not related to Prime95. From a command prompt, you could do a 'netstat' (or 'netstat -b' if supported) to see a list of programs that are currently using your network. I'd suggest googling for a freeware network monitor if you really want to track down what's causing the traffic.

2009-02-06, 22:06	#4
jasong "Jason Goatcher" Mar 2005 110110110011₂ Posts	Sounds to me like someone is taking advantage of an unsecured wireless line to do some p2ping. You might want to try going back to just a wired connection for a few minutes to a few hours. If turning off the wireless stops the action all of a sudden, then it's probably a bandwidth thief. Downloading from the net might take a few seconds to slack off if someone's stealing bandwidth(has to do with the nature of p2ping), but uploading should just stop cold if it's a wireless thief. Be sure everyone in the house knows not to get on the computer during that time, since that might confuse things.

2009-02-07, 02:54	#5
potonono Jun 2005 USA, IL C1₁₆ Posts	The complaint was inbound/outbound traffic on two specific machines, not just an increased amount of traffic over the router. If that were the case, the router logs would definitely show another machine connecting. It's much more likely a valid program on each machine that is contacting servers for updates, though malicious programs could always be a culprit if you're not careful about what gets installed.

2009-02-07, 20:52	#6
Maybeso Aug 2002 Portland, OR USA 2×137 Posts	Thanks for your ideas guys, its helped me to focus my hunt. I couldn't figure how to turn off the wireless part of my router, so I limited it to 2 connections (me) for a while. That stopped it. It was some app on both machines that needed a generic connection to get outside. If I manage to track down which app and how I got it I will let you know. :-) Thanks again, Bruce