Weird network usage!

this is very weird I have no idea where to post this. For about half a week my laptop has been downloading and uploading either 34 or 64KBytes/s (monitored via stat menu) each over port 80. When this happens i can no longer use the internet. This only happens on my macbook pro, not our iMac, XP desktop, iphone, or ipad. This also only happens when my laptop is plugged into our router both over wireless and wired. It does not happen when i am plugged directly into our satellite modem or when I use the internet at the library. if I block port 80 on my router it does not happen. if I run little snitch and disable everything and/or run the built in firewall, it still happens. Since this has started we burned thru 2GB of data in 48 hours on monday and tuesday, and we have a rolling 30 day 7.5 GB cap.
I have verified that my MBP is up to date, i installed the most recent firmware on the router yesterday, and even left the router and modem off for 6 hours (time between when I go to bed and when mom wakes up) and still getting hit. I have checked my logs on my router and it reports nothing. I am going to do wireshark soon to see what comes up. Everything I can think of I have ruled out. Please someone help!

Beavis2084 wrote:
Does this happen with ANY user logged onto the macbook?
Yes
Are you seeing network activity to/from the macbook at login screen (before logging in)?
No
Have you looked at active connections and identified what your macbook is talking to?
Yep. did a TCPdump last night with the guidance of my cousin. i would wait to start it til after I started being hit and saw lines like
00:35:45.708910 IP 10.0.6.2.49278 > a184-86-156-20.deploy.akamaitechnologies.com.http: Flags [F.], seq 632, ack 914, win 65535, options [nop,nop,TS val 458154135 ecr 351722], length 0
00:35:45.709836 IP a184-86-156-20.deploy.akamaitechnologies.com.http > 10.0.6.2.49279: Flags [.], ack 1, win 4096, options [nop,nop,TS val 355596 ecr 458153749], length 0
for websites amazonaws.com, 1e100.net, akamaitechnologies.com
What applications are installed? Do you have anything that could be updating? How about "Software Update"? Is it set to auto-download updates?
I did not install anything new right before this happened. I am on a satellite connection so I do Software updates by hand when in town.
What applications and processes are running when this occurs?
some times many, some times nothing. I have even gone thru processes and started killing them one by one (if I know they can be killed safely without killing the machine) but it does not stop.
If you have this running, and you break the WAN connection from back of router, does the macbook still send/receive (verifying that the connections in question are out to the cloud, not another device inside the network)?
My cousin and I are now thinking i might be part of a botnet.
no, it stops. It is defiantly going thru our router. We have a 7.5GB cap and in 48 hours earlier this week we went thru 2GB

Similar Messages

  • Activity Monitor and Network Usage??

    I'd like to get an idea of my network usage per month prior to signing up for a service plan, and I notice that the Network tab of Activity Monitor will track Data received. When or how does the number shown there get reset to zero? What would be the best way to track the network usage over a period of a week or so?

    I believe the number is from your last login, but it shouldn't be too hard to test whether that is the starting point or the last restart.
    Neither will help you track network usage over a specific period. For that, you will have to hunt down a utility on macupdate.com or versiontracker.com. I'm pretty sure I've seen some go by. You might search using terms like "ISP", "bandwidth", "network", and "meter".

  • Slow performance, weird memory usage, hanging when closing safari tab

    Hi, i recently noticed that my MacBoo Pro was with low performance after some hours of use.
    I'm a heavy user, so I try to monitor what might be causing it. What i note was:
    After restart (or fresh start), my computer was ok;
    I use applications like adobe Lightroom and VMWare Fusion;
    Then I star feeling like Safari was too slow to open pages - I thought it was the internet link first, but even local webpages are slow. I notice that when a click to close a tab, it take almost 2 sec to do it. The same when click to open any link on that page.
    I start the activity monitor, but my proc usage are low. Then, I notice the (weird) memory usage:
    Take a look at "memory used". I closed all applications before take this screenshot. i've trying to identify what is consuming this memory, but.. no success.
    Anyone has any idea what can might be causing it?
    My HW information:
    all my apps are updated.

    Memory usage was normal when you took that screenshot.
    When you have the problem, note the exact time: hour, minute, second.  
    These instructions must be carried out as an administrator. If you have only one user account, you are the administrator.
    Launch the Console application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
    The title of the Console window should be All Messages. If it isn't, select
              SYSTEM LOG QUERIES ▹ All Messages
    from the log list on the left. If you don't see that list, select
              View ▹ Show Log List
    from the menu bar at the top of the screen.
    Each message in the log begins with the date and time when it was entered. Scroll back to the time you noted above.
    Select the messages entered from then until the end of the episode, or until they start to repeat, whichever comes first.
    Copy the messages to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.
    The log contains a vast amount of information, almost all of it useless for solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.
    Please don't indiscriminately dump thousands of lines from the log into this discussion.
    Please don't post screenshots of log messages—post the text.
    Some private information, such as your name, may appear in the log. Anonymize before posting.

  • "Normal" Network Usage for MacMini Server

    I have a 2011 MMS with a Corei7 proc and 16 GB of ram.  I also have approximately 30 workstations - all mac.  Everything is running Mavericks (server is running server 3.0).
    All of my users run network accounts.  I've noticed what I would consider substantial network traffic from each machine directly to the server on port 445 (I use SMB home shares).  Using the "nettop" command, I determined this traffic is mostly from "kernel_task" and on the low side is around 8 GB for a couple of days, upwards of 80 GB on some machines for a couple of days.  The machines generally appear to run fine and there is no significant CPU usage.  Sometimes, a machine will occasionally "forget" to delete a file on logout and I get some funky errors until I clean it up (a lock file for firefox or the .mcmlx file) 
    The question is, is this a "normal" (i know relative...) amount of traffic?  It seems that whenever I open safari or firefox, the "kernel_task" network usage starts to climb rapidly.
    I guess I am concerned that this traffic could be causing some issues with the server so that it is "missing things" on logout of each user.  I did not have any of these issues prior to Mavericks and the SMB updates.  I previously used AFP, however when I use AFP firefox (required for a special internet school management application) goes crazy. 

    There was a big issue in school Servers (10.6 and previous) where the computers were almost all Network Users, often operating from computer clusters (not one user per computer).
    For Network Users:
    /Users/user-short_name/Library/Caches ...
    ... is a file on the SERVER. That is where cached firefox and safari stuff is sent! [from the Web to the WorkStation, copied to the cache on the Server, copied back to the workstation when the User changes pages, and on and on. It beats up your network, while the drive on the workstation is nearly idle. Some Admins advocated turning off Browser Caching entirely as their solution.]
    WorkGroup Manager eventually provided a work-around in an additional MCX manifest that could be added to any user:
    com.apple.MCXRedirector.manifest ...
    that had several different options for ways to deal with the Caches. The most popular was to delete the Cache in the User's Home folder, and link to:
    /private/tmp/short-User_name/Library/caches ...
    ...This folder is on the WorkStation where the User is logged in, and will be inaccessible or deleted by the time the next user logs in at that computer.
    There are articles online that contain recipes for converting the MCX manifests to use them as Profile manager xml files to support that feature indirectly, but I have not seen direct support for the feature mentioned as yet.

  • Mail suddenly hogging network usage

    I have been using the mail app for years and just the other day it started spiking my network usage to the point that I cannot leave mail open at all.
    Initially, the account in question had the loading wheel on it constantly even though there was nothing reported in the mail activity window. After browsing some forums I tried deleting mails prefs but that didn't solve the problem. Now there's no loading wheel but it still hogs network.
    I've read that this may be because I tried to send something with a large attachment, which I recently have, so I'm guessing this is the problem but I have no clue how to fix it. I went on gmail in safari and deleted the large email I sent in the from the sent folder and cleared the trash but this has still not solved my problem.
    Does anyone have any clues that may help me? I just want to use mail again. Thanks.
    -Spencer

    I found this from the user GoldenShoes:
    The problem appears to be in the calendar data you have in Mail, so if you should test that by removing the todos-info.plist file from Home/Library/Application Support/iCal and then restart Mail to see if the problem continues. If not, then you'd need to quit Mail, restore the todos-info-plist file, open iCal and copy all those ToDo items; then remove the todos-info.plist file again, restart iCal and paste the ToDo items back in and save it.
    Then you can restart Mail and see if that solves your problem.
    It worked for me... hope it helps you.

  • What can I do to stop high network usage when a Samba share is mounted?

    Ok, so i've done a lot of googling on this, but i've not really found any conclusive answers.
    Basically, when I mount a samba share from another machine, Lion goes crazy. I can see from iStat menus that network (wireless) usage varies wildly from 300KB/s, right up to 6/7 MB/s, but my cpu usage doesn't spike at all. When this is happening the laptop is almost unusable, clicking something can take 30 seconds for a response. I'm presuming that this is something to do with Spotlight trying to index the share, but as it's several terabytes in size, it never completes. I've left the laptop on overnight in the hope that whatever process is causing this would finish, but to no avail. I've also placed the share in the Privacy tab in Spotlight's preferences, and used mdutil -i to stop it accessing the volume, but with no luck.
    Can anyone help? It's driving me nuts and it means i can't access my files without having to ftp in instead.
    I'm running 10.7.3

    Unfortunately, your description of the problem and the placement of both your main and AirPort Express routers does lend itself to believe the problem is most likely Wi-Fi interference. If it isn't the microwave or portable phones, it could be obstacles like walls between the routers that may be preventing the stream from consistently reaching the Express.
    In your configuration, the stream will first travel to the main router, and then, from the main router to the AirPort Express. If, for example, you started the stream in the same room as the Express, that stream would have to travel across several rooms at least twice.

  • Weird network problem: Ethernet link going down for few seconds, and up again

    Hi,
    this problem is driving me nuts for weeks now, and I've not had any success with solving it myself, so I hope someone might have a clue...
    A few weeks ago, maybe 2 months, when downloading VOD content from iTunes, the download suddeny stopped after a while, saying that there is a problem with my network connection. I can then resume the download until the next connection drop occurs. iTunes was and still is the only app that makes the problem noticeable (FTP, browsing, Mac App Store etc. are working fine), however, as this also affects iDevice firmware downloads and basically everything I download via iTunes, the problem started to really annoy me. I'm not sure, but the problem might have been introduced after upgrading from Lion to Mountain Lion/10.8, which I needed for Logic X.
    So here is what happens:
    I have an iMac12,2, Mid 2011, 27inch, i5 2.7GHz, 16GB RAM, 256GB Apple SSD + 1TB HDD. When using ethernet, the iMac randomly loses its link to the network. My router is a FRITZ!Box 7390 (german make). There are no switches between my iMac and the router. When that happens while running ping, this is how it looks like:
    64 bytes from 192.168.1.1: icmp_seq=3558 ttl=64 time=0.542 ms
    64 bytes from 192.168.1.1: icmp_seq=3559 ttl=64 time=0.424 ms
    ping: sendto: No route to host
    Request timeout for icmp_seq 3560
    ping: sendto: No route to host
    Request timeout for icmp_seq 3561
    ping: sendto: No route to host
    Request timeout for icmp_seq 3562
    ping: sendto: No route to host
    Request timeout for icmp_seq 3563
    ping: sendto: No route to host
    Request timeout for icmp_seq 3564
    Request timeout for icmp_seq 3565
    64 bytes from 192.168.1.1: icmp_seq=3566 ttl=64 time=0.508 ms
    64 bytes from 192.168.1.1: icmp_seq=3567 ttl=64 time=0.493 ms
    And this is what the logfile contains at the same time:
    28.10.13 21:36:35,000 kernel[0]: AppleBCM5701Ethernet [en4]: Link down (womp disabled, proxy idle)
    28.10.13 21:36:37,099 configd[18]: network changed: v4(en4-:192.168.1.188) DNS- Proxy-
    28.10.13 21:36:37,106 configd[18]: network changed: Proxy
    28.10.13 21:36:37,112 netbiosd[12000]: network_reachability_changed : network is not reachable, netbiosd is shutting down
    28.10.13 21:36:40,000 kernel[0]: Ethernet [AppleBCM5701Ethernet]: Link up on en4, 1-Gigabit, Full-duplex, Symmetric flow-control, Debug [796d,0323,0de1,0300,cde1,3800]
    28.10.13 21:36:40,237 configd[18]: network changed: Proxy
    28.10.13 21:36:42,544 configd[18]: network changed: v4(en4+:192.168.1.188) DNS+ Proxy+ SMB
    So the ethernet interface loses the link for a few seconds, and gets back up again. It's not long enough to affect average TCP connections, however it is long enough to completely screw iTunes.
    What I've tried:
    - changed all cables (save the one that's going from the ethernet outlet on my room's wall to the server/router room, as it's not replaceable (running within a wall) and I really don't know why it should become faulty offhandedly)
    - cycled ethernet ports at the router to make sure they're not faulty
    - ping'd the router from different computers on all its ethernet ports, all working fine
    - connected my iMac to router via wifi, all working fine
    - bought a Thunderbolt Ethernet adapter to make sure onboard ethernet card isn't faulty: problem still there
    - installed 10.9 over 10.8.5, problem still there
    What I didn't check is what happens when ping'ing the router via my cables, but from another computer, as I don't have one. I will try to borrow a MacBook and check that.
    So I figured it must be a local problem, as the network infrastructure itself works nicely and all cables seem to be sound. It is also not a hardware issue, as the problem occurs both with the onboard NIC and the Thunderbolt NIC. What mystifies me is that it doesn't happen when using Wi-Fi (but switching to that is not an option - it's too slow).
    I tried to use both DHCP and fixed IP addresses, different IP ranges, made sure that static IPs don't collide with the router's DHCP range, updated the router firmware, updated the firmware of all Airport Express and Time Capsules I've got in my network (just to be sure), switched all energy saving settings to "Never" (as it has been suggested here from time to time), but nothing helped ... and I don't know what else to check.
    I hope that someone has an idea of what's happening here!
    Thanks in advance!

    It looks like hooking an ethernet switch between my iMac and the router did the trick. I didn't get any timeouts after I did that. It must have been a really weird incompatibility between my iMac and the router. Still have to see if iTunes gets through without losing the connection, I hope I'll be able to check that tomorrow night. I'll report back.
    So maybe try just hooking another ethernet switch between your mac and the other side. It might actually help!

  • Weird Network-manager-applet icon

    I have installed network-manager-applet 0.9.8.8-1 and a weird icon is displayed: a question mark
    What does it mean?

    toni wrote:
    Inxsible wrote:its not connected to any network ?
    I am connected correctly and I have Internet connection without problems but I do not know why is it showing a question mark...
    Ok, but you didn't mention that in your first post and sadly, I cannot read minds.
    In any case, its a bug as has been posted above.

  • Comcast Warning Anyone know of Network Usage Meter for Mac?

    I just received a "warning" of excessive network bandwidth usage by Comcast.
    They suggest I get a free "meter" for my computer.
    I downloaded about 4 of them (freeware) and they either dont work well, dont have documentation to have them work at all, or do not have a history function.
    I would like to start it running first of month and then see how much I use that month
    Suggestions?
    TIA

    Well it really depends on your network setup. I'd personally suggest getting a cheap box and running a sort of Firewall that will log network traffic. I run m0n0wall.ch/wall and it's been great, BUT it only shows me real time traffic, no historical data. I'm pretty sure www.pfsense.com will track historical bandwidth and is based on the m0n0wall project and another alternative which I believe will track data usage is www.Smoothwall.org or if you want to get down and dirty, Cacti will do it as well but takes quite a bit to configure.

  • Broadband modem network usage monitor

    Hi all I have a system with 2 computers and networked printer. I know that BT have a broadband usage monitor in my BT . What I would like to know is there a program that will monitor total usage on router and individual usage on each computer.
    dpick1947

    If you're using the home hub then it keeps track of usage. It does reset if your connection drops or you turn off the router though.
    You can get freemeter and install it on each computer. That should give you a good idea.
    If you want to say thanks for a helpful answer,please click on the Ratings star on the left-hand side If the the reply answers your question then please mark as ’Mark as Accepted Solution’

  • Weird network download issue

    I'm having a weird problem with my download speeds. I don't believe this is ISP related (I'll explain below). I often download large files on my Macbook. I use Menu Meters because I like to see how my network speed is. Up until a month ago I've been able to "max" out my connection typically getting a 1.5MB/s download speed (or in that area). Lately, RX throughout put hasn't been able to pass the 800KB/s. It gets to 798 KB/s or about that, but never above.
    I'm connecting wirelessly through a Linksys WRT54G and have not had any issues with it. I even updated it's firmware, but the problem still persists.
    I've run multiple speed tests on various sites and found the speeds to be close to or above the advertised speed of my cable internet (about 7 mbPS down). I'm just curious what suggestions some of you might have as to a solution of sorts. It's very frustrating and I'm stumped.
    FYI: Downloading these files on my PCs in the house download and don't exhibit any of these speed issues.
    Thanks in advance for your help and suggestions.

    That's the problem then... might takes months to show up too, as well as other symptoms...
    http://discussions.apple.com/thread.jspa?messageID=2985422&#2985422

  • Unexplained network usage

    The last few days I have been experiencing strange issues with my networking.  I shutdown all of my apps that I think could use the network, and I still see some usage.  As much as 60Kbps!?  My downloads, including pacman and youtube, stop randomly and I have to start over.  This happens in other web browsers as well.    I recently installed Dropbox and started noticing this about the next day.  Sometimes webpages fail to load for several minutes at a time.  How can I find out what is sending and receiving data?  Or, what the issue could be?

    Thank for reminding me about wireshark and netstat!  I'm seeing a lot of 192.168.0.1 to 192.168.0.2 destination unreachable in wireshark.
    netstat shows:
    Active Internet connections (w/o servers)
    Proto Recv-Q Send-Q Local Address Foreign Address State
    tcp 1 0 192.168.0.2:55106 128.242.186.25:www-http CLOSE_WAIT
    tcp 0 0 192.168.0.2:51128 iw-in-f18.1e100.n:https ESTABLISHED
    tcp 0 0 192.168.0.2:36504 www-13-02.snc4.fa:https ESTABLISHED
    tcp 0 0 192.168.0.2:42832 iw-in-f101.1e1:www-http ESTABLISHED
    tcp 0 0 192.168.0.2:43397 iw-in-f83.1e100.n:https ESTABLISHED
    tcp 0 0 192.168.0.2:55820 yx-in-f102.1e1:www-http ESTABLISHED
    tcp 0 363 192.168.0.2:58435 p3nlh056.shr.p:www-http ESTABLISHED
    tcp 0 0 192.168.0.2:44696 channel-196-202.0:https ESTABLISHED
    udp 0 0 192.168.0.2:58956 bindcat.fhsu.edu:ntp ESTABLISHED
    udp 0 0 192.168.0.2:45664 ntp2.Rescomp.Berkel:ntp ESTABLISHED
    udp 0 0 192.168.0.2:45923 173-203-122-111.vds:ntp ESTABLISHED

  • Node showing up with a weird network name, not sure how to fix

    Just discovered this while working with a friend on figuring out how to use Qmaster and create a cluster of nodes across our network. We are running the Controller from a G5 and have two other service nodes set up. One is a MacBook Pro and another is a G4, which is the machine in question. While submitting a batch and viewing in Batch Monitor, the G4 would show up as "daves-ipod". We could not figure out why it wasn't showing up as its network shared name which is "PowerMacG4". After searching around the G4, I discovered via Finder that this "daves-ipod" business was coming from the Network/Servers/daves-ipod area in the Finder (see the photo below) I cannot figure out how or where to change this name, or even where it came from, since neither of our names are Dave. I'm sorry if this question belongs in the Finder area of Apple Discussions...

    Have you checked the network name in the sharing prefs?

  • Lumia series has very weird battery usage, please ...

    Hey. I have a lumia 920 and a 1020, and my wife has a 925. All of them does the same thing, and I can not for the life of me figure out why it does it.
    Suddenly it will use the battery like crazy. I mean crazy as in losing 50% in an hour laying idle. It might even restart sometimes. I have played around with all sort of settings making sure nothing is turned on that does not need to be on.
    It does this at random, and at random times. It might be days between.
    I tried all sort of battery apps to see if I could find one that would specify what the battery was used on, but as fare as I can see there is no such app. There is graphs and % per hour and so on, but no specific power usage app.
    I really hope that I am not alone in this, and there is a solution out there. It is a really big problem as the phone has ran out of power in the middle of the night, and I use it as an alarm clock. It has used 100% just laying on the table in 1 night, though I am not sure when exactly it ran out of juice.
    Anyone know **bleep** is going on? This is the 3ed phone that does it, and I dont know whats wrong here.

    There have been instances where I have experienced excessive battery drain on my Lumia phones. The worst was due to my Exchange account which tore through my battery in just a few short hours. What actually happened was that my company decided to block all access to everyones accounts while they were carrying out some security work but my phone went into overdrive trying to constantly synchronise with the servers and failing. This caused the battery to drain very rapidly indeed. 
    So my first tip would be to check out all accounts and apps that have a regular sync interval or require an active internet connection to function. Things like instant messenger apps (Viber, WhatsApp and Skype) and also have a look at your Email accounts.
    Sometimes though, it can something as simple as a stuck process using the CPU but these can be difficult to identify and pin down. 
    Another major cause of excessive battery drain is when the phone is looking for a 3G/4G signal when you are in an area with poor 3G/4G coverage. 4G especially will be a big power hog and have more of an impact on your battery than 3G because it naturally uses more power than 3G.
    Lastly, you can search the forum for "Excess battery drain" or words to that effect for other help and advice, as this topic has been discussed quite a bit already.

  • Weird Battery Usage Using the Dock's Line-Out

    I have noticed something particularly weird about using my iPod w/the dock's line-out. (I have the original 60GB photo).
    When I use the dock's line-out to connect to my home stereo via an RCA cable, I get roughly 3 hours of continuous play on a full charge before the battery meter changes decreases.
    But when I use the dock's line-out to connect to my PC computer speakers via an RCA cable (at work), I get roughly 2 hours of continuous play on a full charge before the battery meter changes decreases.
    Anyone have any ideas what may be causing the shorter battery life while listening via PC speakers?
    Lisa

    Hi Carl - thanks for the reply. I consistently get 15 hours of continuous play from my battery. Yep, the battery & meter are properly calibrated (in fact, I'm pretty anal about that!) I'm not sure I'm getting less battery life, per se, I just find it interesting that I get 2 different readings from using the line-out in 2 different configurations. I'm assuming that maybe the PC speakers are using more power? I'm not electrically-inclined, and maybe I'm just going on a wild goose chase!
    Lisa

Maybe you are looking for