How can I find out what is using all of my upload bandwidth?


Recommended Posts

Something is randomly using all of my upload bandwidth, which makes my connection crawl.

I do not have spyware, adware or a virus.

How can I find out what process is doing this?

EDIT: This only started happening after I installed NetBalancer. However, it was uninstalled hours ago and I have rebooted, so I'm unsure how it can even be related.

Windows 7 x64 SP1.

EDIT: I rang Sky Broadband, they said it was an issue at the local hub and that it will be fixed within 30 minutes. I read a book for an hour, came back and the connection is now all good. Sorry, guys! Just seemed a massive co-incidence.

Look at the Task manager -- ctrl-alt-delete.

What processes are running ?

Also it may be a rootkit, and something has made your PC a zombie.

Do a rootkit scan.

http://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx

  On 24/07/2011 at 13:14, Hum said:

Look at the Task manager -- ctrl-alt-delete.

What processes are running ?

Also it may be a rootkit, and something has made your PC a zombie.

Do a rootkit scan.

http://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx

I have no rootkits. Only novices get rootkits, spyware, adware or virus'.

This only started happening after I installed NetBalancer. However, it was uninstalled hours ago and I have rebooted, so I'm unsure how it can even be related.

Maybe I should call Sky Broadband, it could be an issue on their end (i.e. a co-incidence).

  Quote
I have no rootkits. Only novices get rootkits, spyware, adware or virus'.

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the superiority complex. If you can't rule it out (and opinion rules nothing out) then it still exists.

  • Like 2
  On 24/07/2011 at 13:24, njlouch said:

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the attitude.

There is no attitude. It's very true. Just because I find it very easy to avoid getting rootkits, spyware, adware or viruses, it doesn't mean I know what software you guys recommend to discover what processes are using my bandwidth. I know that NetLimter can tell me what processes are using my bandwidth but in case that program is calling this issue, I am of course reluctant to re-install it.

The reason I know it's not a rootkit is because I doubt very much it's a co-incidence that NetLimiter was installed/uninstalled an hour before this issue occurred.

For ****s and giggles, I'll run Sophos Anti-Rootkit.

  On 24/07/2011 at 13:29, Detection said:

I think the clue is in the name "NetLimter "

Sounds like it has left something behind after the uninstall

That is not logical. The program was used to stop Firefox using all of my 130 KB/s upload bandwidth. I used it to limit Firefox to using a maximum of 95 KB/s in upload bandwidth. I then uninstalled it as, even though it worked, I decided just to go ahead and let Firefox do what it wishes.

So why would that program, installed or not, be doing this to my connection...?

EDIT: Sophos Anti-Rootkit found nothing suspicious. As expected.

As it is designed to limit bandwidth, your issue is bandwidth related, and it started around the time you installed and uninstalled this program I would say its more likely to be that than a coincidence.

I vaguely remember installing something similar if not the same program a while ago and completely losing my connection, programs like this install drivers I think, check hidden items in the device manager / services running in services.msc etc

If it all fails, as posted above, system restore to before the issue

  On 24/07/2011 at 13:36, Detection said:

As it is designed to limit bandwidth, your issue is bandwidth related, and it started around the time you installed and uninstalled this program I would say its more likely to be that than a coincidence.

I vaguely remember installing something similar if not the same program a while ago and completely losing my connection, programs like this install drivers I think, check hidden items in the device manager / services running in services.msc etc

If it all fails, as posted above, system restore to before the issue

It does install a service but from what I can tell, there appears to be no related services on my computer :/

  On 24/07/2011 at 13:36, _DP said:

Do you get the same issue with other browsers?

This is happening system-wide. For example, I can be playing a game fine then a few seconds later, I get 900 ping before getting kicked. It's then that I realize something was uploading using all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds.

If your looking to track what process is using upload, you could run tcpview http://technet.microsoft.com/en-us/sysinternals/bb897437

You could run wireshark as well - great FREE protocol analyzer http://www.wireshark.org/ to see what is actually being put on the wire, etc. but what show you what process did it, just what is being done.

Or you could put netlimiter back on ;) It shows you what is using bandwidth heeheheh

I rang Sky Broadband, they said it was an issue at the local hub and that it will be fixed within 30 minutes. I read a book for an hour, came back and the connection is now all good. Sorry, guys! Just seemed a massive co-incidence.

I wasn't trying to be douchey earlier when I said it's not difficult to avoid getting rootkits, spyware, adware or viruses, it just really is easy to avoid them in my opinion :s Stick to legitimate websites, check comments when downloading torrents, keep your Windows and MSE up-to-date, don't start using dodgy Facebook apps etc. and you will be fine!

"all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds. "

Um how is your box uploading an issue at the local hub?

  On 24/07/2011 at 13:45, BudMan said:

"all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds. "

Um how is your box uploading an issue at the local hub?

I am not sure. The ping issues were due to an problem at the local LLU according to Sky Broadband and when they said it would be fixed in about 30 minutes, they were right!

Sounds like a common sense solution.. the program you installed which was "NetBalancer" has screwed with Winsock... you need to reset this.

Open up command prompt.... and type the following just as I've put it spaces and all:

netsh winsock reset catalog - Hit Enter

netsh int ip reset reset.log hit - Hit Enter

Now Reboot and test again.

Even if you think your problem is solved don't put that junk netbalancer back on there..its nothing but a sandbox and useless...control your bandwidth or monitor it using your router. Run these reset lines to get Windows7 winsock stacks back to default the way its supposed to be if anything did in fact alter it.

  On 24/07/2011 at 13:24, njlouch said:

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the superiority complex. If you can't rule it out (and opinion rules nothing out) then it still exists.

Actually with most home routers it's not that easy to get per device bandwidth usage data.

Even the ones that allow collecting the data via something like SNMP usually only go down to the port level, which is no good in the case of wireless or if there's a switch further upstream of that port.

"I am not sure. The ping issues were due to an problem at the local LLU"

And are you still seeing an upload of 130 when your not doing anything?

And I agree with xbamaris the resource monitor in w7 is perfect tool for looking this up, not sure why I forgot it other than just habit from older windows versions not having the ability to look at this. But yes that is the best suggestion for looking to see what is uploading.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I gave you an upvote because you are my favorite Neowinian!
    • Alienware 34 240Hz QD-OLED Monitor: A premium ultrawide for serious gamers - save $100! by Paul Hill Are you a serious gamer looking to save money on a monitor upgrade? If so, check out this deal on the Alienware 34 240Hz QD-OLED Gaming Monitor (AW3425DW), which is discounted by 13% from $799.99 to just $699.99. This ultrawide monitor features a 3,440 x 1,440 pixel display and the screen is curved for added immersion. Two features that will stand out to competitive gamers are the 240Hz refresh rate and 0.03ms GtG response time which will minimize any lagging from input to display, making you a more lethal player. Why QD-OLED matters for gamers and creators This Alienware uses QD-OLED (Quantum Dot Organic Light Emitting Diode) technology which combines OLED’s self-emitting LEDs with the color-enhancing capabilities of quantum dots. This results in higher brightness, a wider color gamut, deeper blacks, and wide viewing angles. With the 1800R curve built into this display, whatever you’re immersed in will wrap around, making your games more absorbing, potentially reducing other distractions. There is also VESA DisplayHDR TrueBlack 400 certification and 1,000 nits peak HDR brightness on this display. Gamers using this monitor will be able to get the best quality picture from this monitor to improve the experience and their competitiveness. It’s also good for creators who want to edit images and videos as they will see the content they're editing in the best ways possible, so they can be totally sure it’s ready for publication. Design, connectivity, and user experience The Alienware 34 uses an updated Interstellar Indigo design which is more compact and uses a flat stand. This frees up desk space compared to older Alienware designs and still allows for height, tilt, and swivel adjustments and VESA mount compatibility. Regarding ports, this monitor features 2x HDMI 2.1, 1x DisplayPort 1.4, 1x USB 5Gbps Type-B upstream, 1x USB 5Gbps Type-A downstream, 1x USB-C 5Gbps downstream with 15W charging. The USB-C port is for data and charging, not video input and the lack of KVM switch could be a drawback for some. If you decide to pick up this monitor, according to PCWorld, it does not include in-built speakers so you will need to connect your own. This is not a big issue because gamers looking for a premium playing experience will not want to rely on subpar in-built speakers anyway. Is the AW3425DW the right fit for you? Given its curved display, quality QD-LED display technology, and its fast response time, this monitor is a great pick for serious gamers looking for top-tier performance and immersion. Content creators who value color accuracy will also do well in picking up this Alienware monitor. Alienware 34: $699.99 (Amazon US) / MSRP $799.99 This Amazon deal is US-specific and not available in other regions unless specified. If you don't like it or want to look at more options, check out the Amazon US deals page here. Get Prime (SNAP), Prime Video, Audible Plus or Kindle / Music Unlimited. Free for 30 days. As an Amazon Associate, we earn from qualifying purchases.
    • Needs to happen quicker IMO. Pretty dang sick of the same articles reworded five different ways and reposted. I’m sure some people like reading the typical MS tells you why Windows 11 is better article over and over or the minute by minute countdown on the EOL of Windows 10, but I’m not one of them.
  • Recent Achievements

    • Rising Star
      Phillip0web went up a rank
      Rising Star
    • One Month Later
      Epaminombas earned a badge
      One Month Later
    • One Year In
      Bert Fershner earned a badge
      One Year In
    • Reacting Well
      ChrisOdinUK earned a badge
      Reacting Well
    • One Year In
      Steviant earned a badge
      One Year In
  • Popular Contributors

    1. 1
      +primortal
      545
    2. 2
      ATLien_0
      205
    3. 3
      +FloatingFatMan
      170
    4. 4
      Michael Scrip
      150
    5. 5
      Som
      131
  • Tell a friend

    Love Neowin? Tell a friend!