How can I find out what is using all of my upload bandwidth?


Recommended Posts

Something is randomly using all of my upload bandwidth, which makes my connection crawl.

I do not have spyware, adware or a virus.

How can I find out what process is doing this?

EDIT: This only started happening after I installed NetBalancer. However, it was uninstalled hours ago and I have rebooted, so I'm unsure how it can even be related.

Windows 7 x64 SP1.

EDIT: I rang Sky Broadband, they said it was an issue at the local hub and that it will be fixed within 30 minutes. I read a book for an hour, came back and the connection is now all good. Sorry, guys! Just seemed a massive co-incidence.

Look at the Task manager -- ctrl-alt-delete.

What processes are running ?

Also it may be a rootkit, and something has made your PC a zombie.

Do a rootkit scan.

http://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx

  On 24/07/2011 at 13:14, Hum said:

Look at the Task manager -- ctrl-alt-delete.

What processes are running ?

Also it may be a rootkit, and something has made your PC a zombie.

Do a rootkit scan.

http://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx

I have no rootkits. Only novices get rootkits, spyware, adware or virus'.

This only started happening after I installed NetBalancer. However, it was uninstalled hours ago and I have rebooted, so I'm unsure how it can even be related.

Maybe I should call Sky Broadband, it could be an issue on their end (i.e. a co-incidence).

  Quote
I have no rootkits. Only novices get rootkits, spyware, adware or virus'.

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the superiority complex. If you can't rule it out (and opinion rules nothing out) then it still exists.

  • Like 2
  On 24/07/2011 at 13:24, njlouch said:

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the attitude.

There is no attitude. It's very true. Just because I find it very easy to avoid getting rootkits, spyware, adware or viruses, it doesn't mean I know what software you guys recommend to discover what processes are using my bandwidth. I know that NetLimter can tell me what processes are using my bandwidth but in case that program is calling this issue, I am of course reluctant to re-install it.

The reason I know it's not a rootkit is because I doubt very much it's a co-incidence that NetLimiter was installed/uninstalled an hour before this issue occurred.

For ****s and giggles, I'll run Sophos Anti-Rootkit.

  On 24/07/2011 at 13:29, Detection said:

I think the clue is in the name "NetLimter "

Sounds like it has left something behind after the uninstall

That is not logical. The program was used to stop Firefox using all of my 130 KB/s upload bandwidth. I used it to limit Firefox to using a maximum of 95 KB/s in upload bandwidth. I then uninstalled it as, even though it worked, I decided just to go ahead and let Firefox do what it wishes.

So why would that program, installed or not, be doing this to my connection...?

EDIT: Sophos Anti-Rootkit found nothing suspicious. As expected.

As it is designed to limit bandwidth, your issue is bandwidth related, and it started around the time you installed and uninstalled this program I would say its more likely to be that than a coincidence.

I vaguely remember installing something similar if not the same program a while ago and completely losing my connection, programs like this install drivers I think, check hidden items in the device manager / services running in services.msc etc

If it all fails, as posted above, system restore to before the issue

  On 24/07/2011 at 13:36, Detection said:

As it is designed to limit bandwidth, your issue is bandwidth related, and it started around the time you installed and uninstalled this program I would say its more likely to be that than a coincidence.

I vaguely remember installing something similar if not the same program a while ago and completely losing my connection, programs like this install drivers I think, check hidden items in the device manager / services running in services.msc etc

If it all fails, as posted above, system restore to before the issue

It does install a service but from what I can tell, there appears to be no related services on my computer :/

  On 24/07/2011 at 13:36, _DP said:

Do you get the same issue with other browsers?

This is happening system-wide. For example, I can be playing a game fine then a few seconds later, I get 900 ping before getting kicked. It's then that I realize something was uploading using all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds.

If your looking to track what process is using upload, you could run tcpview http://technet.microsoft.com/en-us/sysinternals/bb897437

You could run wireshark as well - great FREE protocol analyzer http://www.wireshark.org/ to see what is actually being put on the wire, etc. but what show you what process did it, just what is being done.

Or you could put netlimiter back on ;) It shows you what is using bandwidth heeheheh

I rang Sky Broadband, they said it was an issue at the local hub and that it will be fixed within 30 minutes. I read a book for an hour, came back and the connection is now all good. Sorry, guys! Just seemed a massive co-incidence.

I wasn't trying to be douchey earlier when I said it's not difficult to avoid getting rootkits, spyware, adware or viruses, it just really is easy to avoid them in my opinion :s Stick to legitimate websites, check comments when downloading torrents, keep your Windows and MSE up-to-date, don't start using dodgy Facebook apps etc. and you will be fine!

"all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds. "

Um how is your box uploading an issue at the local hub?

  On 24/07/2011 at 13:45, BudMan said:

"all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds. "

Um how is your box uploading an issue at the local hub?

I am not sure. The ping issues were due to an problem at the local LLU according to Sky Broadband and when they said it would be fixed in about 30 minutes, they were right!

Sounds like a common sense solution.. the program you installed which was "NetBalancer" has screwed with Winsock... you need to reset this.

Open up command prompt.... and type the following just as I've put it spaces and all:

netsh winsock reset catalog - Hit Enter

netsh int ip reset reset.log hit - Hit Enter

Now Reboot and test again.

Even if you think your problem is solved don't put that junk netbalancer back on there..its nothing but a sandbox and useless...control your bandwidth or monitor it using your router. Run these reset lines to get Windows7 winsock stacks back to default the way its supposed to be if anything did in fact alter it.

  On 24/07/2011 at 13:24, njlouch said:

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the superiority complex. If you can't rule it out (and opinion rules nothing out) then it still exists.

Actually with most home routers it's not that easy to get per device bandwidth usage data.

Even the ones that allow collecting the data via something like SNMP usually only go down to the port level, which is no good in the case of wireless or if there's a switch further upstream of that port.

"I am not sure. The ping issues were due to an problem at the local LLU"

And are you still seeing an upload of 130 when your not doing anything?

And I agree with xbamaris the resource monitor in w7 is perfect tool for looking this up, not sure why I forgot it other than just habit from older windows versions not having the ability to look at this. But yes that is the best suggestion for looking to see what is uploading.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Well, the interface is horrible. PST isn't fully functional. Can't properly import Thunderbird contacts into it. All that showed up are names.
    • "all the way down" by 33 whole dollars. Amazing. You shouldn't have.
    • If they make a portable version, I might give it a try, but I will always prefer hotkeys to that approach
    • The Synology DS923+ is down to $610 just for today on Newegg by Steven Parker Right now on Newegg, and only for today (June 26) you can find the Synology DS923+ discounted all the way down to $609.99 when using a coupon during checkout, down from it's normal $642.99 price. Although we haven't reviewed the DS923+ on Neowin, we have seen Synology before and rated it quite highly. Besides, the DS1522 even has the same AMD R1600 CPU. Some people would consider Synology homelab NAS equipment the "gold standard", and as such, competitors strive to do as good, at least in regard to the Operating System, DSM, which ticks all the boxes for amateurs, professionals and small business users for its inclusion of mobile apps for core app services such as Surveillance Station, and more. Here are the most important specifications: Synology DS923+ CPU AMD Ryzen R1600 2-core 2.6 (base) / 3.1 (turbo) GHz Graphics No Memory 4 GB DDR4 SODIMM, maximum 32 GB (16 GB x 2) Disk Capacity 72 TB (18TB x 4) RAID Level RAID 0, 1, 5, 6, 10, and JBOD + SHR (Synology Hybrid RAID) Network 2 x RJ-45 1 GbE Internal storage 2 x M.2 2280 NVMe Slot USB Ports 1 x USB 3.2 (5 Gbps) HDMI 1 x Expansion 1 x eSATA 1 x Gen3 x2 network upgrade slot Size (H/W/D) 166 mm x 199 mm x 223 mm Weight 2.24 kg Power 35.51 W (Access) 11.52 W (HDD Hibernation) What's in the box? Main Unit X 1 Accessory Pack X 1 AC Power Adapter X 1 AC Power Cord X 1 RJ-45 LAN Cable X 2 Quick Installation Guide X 1 You may notice that the DS923+ does not have integrated graphics, which is a step down from earlier Intel-based models that did include an iGPU. However, even this year's model (the DS925+) does not include an iGPU with its slightly newer AMD Ryzen Embedded V1500B CPU, but also unhelpfully locks down what you can use in it. All 2025 models require hardware from Synology's own compatibility list, this currently does not affect the DS923+. In addition you are only getting dual 1 GB Ethernet with the DS923+, so you may need to factor in the cost of adding the 10 GbE PCIe network card, which sells for $110.99 on Newegg. Ultimately, deciding on a NAS device comes to down to your individual requirements. For example, more bays is not always better, especially once you factor in the price of hard drives. Those with more modest storage requirements may be better off with a 2-bay device. From my personal experience, DSM 7.2 is great, it's so great that I have installed it on my TerraMaster F4-424 Max. Finally, and perhaps more importantly many tinkerers would prefer building their own server which is definitely a cheaper option, but without the polish of a dedicated NAS. If you have no need to transcode video on the fly and want a four bay NAS device, then the DS923+ is a great solution for every other use case and I can highly recommend it. Synology DS923+ for $609.99 on Newegg (was $642.99) Enter coupon code SACET2369 for above price during checkout
    • I don't think it's childish, but I do think it would be ineffective. If I was addicted to social media I would just disable the extension when I wanted to visit the certain sites.
  • Recent Achievements

    • Conversation Starter
      Kavin25 earned a badge
      Conversation Starter
    • One Month Later
      Leonard grant earned a badge
      One Month Later
    • Week One Done
      pcdoctorsnet earned a badge
      Week One Done
    • Rising Star
      Phillip0web went up a rank
      Rising Star
    • One Month Later
      Epaminombas earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      529
    2. 2
      ATLien_0
      207
    3. 3
      +FloatingFatMan
      168
    4. 4
      Michael Scrip
      150
    5. 5
      snowy owl
      125
  • Tell a friend

    Love Neowin? Tell a friend!