How can I find out what is using all of my upload bandwidth?


Recommended Posts

Something is randomly using all of my upload bandwidth, which makes my connection crawl.

I do not have spyware, adware or a virus.

How can I find out what process is doing this?

EDIT: This only started happening after I installed NetBalancer. However, it was uninstalled hours ago and I have rebooted, so I'm unsure how it can even be related.

Windows 7 x64 SP1.

EDIT: I rang Sky Broadband, they said it was an issue at the local hub and that it will be fixed within 30 minutes. I read a book for an hour, came back and the connection is now all good. Sorry, guys! Just seemed a massive co-incidence.

Look at the Task manager -- ctrl-alt-delete.

What processes are running ?

Also it may be a rootkit, and something has made your PC a zombie.

Do a rootkit scan.

http://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx

  On 24/07/2011 at 13:14, Hum said:

Look at the Task manager -- ctrl-alt-delete.

What processes are running ?

Also it may be a rootkit, and something has made your PC a zombie.

Do a rootkit scan.

http://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx

I have no rootkits. Only novices get rootkits, spyware, adware or virus'.

This only started happening after I installed NetBalancer. However, it was uninstalled hours ago and I have rebooted, so I'm unsure how it can even be related.

Maybe I should call Sky Broadband, it could be an issue on their end (i.e. a co-incidence).

  Quote
I have no rootkits. Only novices get rootkits, spyware, adware or virus'.

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the superiority complex. If you can't rule it out (and opinion rules nothing out) then it still exists.

  • Like 2
  On 24/07/2011 at 13:24, njlouch said:

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the attitude.

There is no attitude. It's very true. Just because I find it very easy to avoid getting rootkits, spyware, adware or viruses, it doesn't mean I know what software you guys recommend to discover what processes are using my bandwidth. I know that NetLimter can tell me what processes are using my bandwidth but in case that program is calling this issue, I am of course reluctant to re-install it.

The reason I know it's not a rootkit is because I doubt very much it's a co-incidence that NetLimiter was installed/uninstalled an hour before this issue occurred.

For ****s and giggles, I'll run Sophos Anti-Rootkit.

  On 24/07/2011 at 13:29, Detection said:

I think the clue is in the name "NetLimter "

Sounds like it has left something behind after the uninstall

That is not logical. The program was used to stop Firefox using all of my 130 KB/s upload bandwidth. I used it to limit Firefox to using a maximum of 95 KB/s in upload bandwidth. I then uninstalled it as, even though it worked, I decided just to go ahead and let Firefox do what it wishes.

So why would that program, installed or not, be doing this to my connection...?

EDIT: Sophos Anti-Rootkit found nothing suspicious. As expected.

As it is designed to limit bandwidth, your issue is bandwidth related, and it started around the time you installed and uninstalled this program I would say its more likely to be that than a coincidence.

I vaguely remember installing something similar if not the same program a while ago and completely losing my connection, programs like this install drivers I think, check hidden items in the device manager / services running in services.msc etc

If it all fails, as posted above, system restore to before the issue

  On 24/07/2011 at 13:36, Detection said:

As it is designed to limit bandwidth, your issue is bandwidth related, and it started around the time you installed and uninstalled this program I would say its more likely to be that than a coincidence.

I vaguely remember installing something similar if not the same program a while ago and completely losing my connection, programs like this install drivers I think, check hidden items in the device manager / services running in services.msc etc

If it all fails, as posted above, system restore to before the issue

It does install a service but from what I can tell, there appears to be no related services on my computer :/

  On 24/07/2011 at 13:36, _DP said:

Do you get the same issue with other browsers?

This is happening system-wide. For example, I can be playing a game fine then a few seconds later, I get 900 ping before getting kicked. It's then that I realize something was uploading using all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds.

If your looking to track what process is using upload, you could run tcpview http://technet.microsoft.com/en-us/sysinternals/bb897437

You could run wireshark as well - great FREE protocol analyzer http://www.wireshark.org/ to see what is actually being put on the wire, etc. but what show you what process did it, just what is being done.

Or you could put netlimiter back on ;) It shows you what is using bandwidth heeheheh

I rang Sky Broadband, they said it was an issue at the local hub and that it will be fixed within 30 minutes. I read a book for an hour, came back and the connection is now all good. Sorry, guys! Just seemed a massive co-incidence.

I wasn't trying to be douchey earlier when I said it's not difficult to avoid getting rootkits, spyware, adware or viruses, it just really is easy to avoid them in my opinion :s Stick to legitimate websites, check comments when downloading torrents, keep your Windows and MSE up-to-date, don't start using dodgy Facebook apps etc. and you will be fine!

"all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds. "

Um how is your box uploading an issue at the local hub?

  On 24/07/2011 at 13:45, BudMan said:

"all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds. "

Um how is your box uploading an issue at the local hub?

I am not sure. The ping issues were due to an problem at the local LLU according to Sky Broadband and when they said it would be fixed in about 30 minutes, they were right!

Sounds like a common sense solution.. the program you installed which was "NetBalancer" has screwed with Winsock... you need to reset this.

Open up command prompt.... and type the following just as I've put it spaces and all:

netsh winsock reset catalog - Hit Enter

netsh int ip reset reset.log hit - Hit Enter

Now Reboot and test again.

Even if you think your problem is solved don't put that junk netbalancer back on there..its nothing but a sandbox and useless...control your bandwidth or monitor it using your router. Run these reset lines to get Windows7 winsock stacks back to default the way its supposed to be if anything did in fact alter it.

  On 24/07/2011 at 13:24, njlouch said:

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the superiority complex. If you can't rule it out (and opinion rules nothing out) then it still exists.

Actually with most home routers it's not that easy to get per device bandwidth usage data.

Even the ones that allow collecting the data via something like SNMP usually only go down to the port level, which is no good in the case of wireless or if there's a switch further upstream of that port.

"I am not sure. The ping issues were due to an problem at the local LLU"

And are you still seeing an upload of 130 when your not doing anything?

And I agree with xbamaris the resource monitor in w7 is perfect tool for looking this up, not sure why I forgot it other than just habit from older windows versions not having the ability to look at this. But yes that is the best suggestion for looking to see what is uploading.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Come the hell on, do we need clickbait titles? "Overwatch 2" - 11 characters "a popular multiplayer hero shooter" - 34 characters What's the purpose here - delivering news or titles for clicks? I think we all know the answer. You're straying into "Number 7 on this list will SHOCK you" territory and while it may work on some crappy sites, this is why they are crappy sites. Just tell the story! Go back and look at popular articles that made Neowin what it was. Did they have headlines of "New OS from major technology conglomerate has astonishing new feature" or is it likely to tell the story succinctly and then elaborate within the content?
    • You can now generate video clips with sound using Veo 3 in Google Vids by David Uzondu Last month, we reported that Google was adding its Veo 2 video generation model into the Google Vids editor. The company has now followed that by rolling out its latest Veo model, Veo 3, which was unveiled at I/O 2025 and went viral recently for its shockingly realistic clips. The main addition this time is the ability to generate both video and synchronized audio directly from a text prompt. Anyone with a compatible Google Workspace plan can now generate 8-second clips right inside a Vids project. You find the "Generate video" icon in the editor, pick Veo 3, and then type out what you want to see and hear. Google's examples include things like a spokesperson delivering a line for a product demo or an employee giving an intro to a safety video. The model is good enough to generate dialogue that actually syncs with the character’s lips. Once you create a clip, you can just insert it into your video. And, if the audio it spits out is garbage, you have the option to mute the clip. The generated clips are currently capped at 720p resolution and run at 24FPS, a far cry from the 4K potential Veo 3 has as a standalone model. Still, getting functional audio generation built-in is a huge step. This native sound capability is what really sets it apart from competitors like OpenAI's Sora, which primarily generates silent videos. Google began pushing out the feature recently, but do not worry if you do not see it immediately in your account. The company is doing a gradual rollout that can take up to 15 days to complete, so your access will depend on which wave your account is in and whether your company's admin uses the Rapid or Scheduled Release track. Access is fairly widespread for paying customers on Google Workspace, including those on Business Standard and Plus, as well as Enterprise Standard and Plus plans. It is also available for Essentials, Nonprofits, and even the lower-tier Business Starter and Enterprise Starter plans. For now, the AI generation only understands prompts in English, and all videos are invisibly watermarked to identify them as AI-generated.
    • My dear freedonX, have you thought about giving Linux a try? If you don't want to be nagged, that's surely the best place to go. And as long as you stick to something simple, you won't need to touch the command line once.
    • For windows, you have winget and chocolatey. For linux, you've got other package managers depending of the base, apt, dnf, zypper, pacman... I dunno about Mac, but even if it doesn't have an accessible package manager, there surely is a store, or worst case, http requests, curl, wget, or something similar.
  • Recent Achievements

    • First Post
      Kurotama earned a badge
      First Post
    • Collaborator
      Carltonbar earned a badge
      Collaborator
    • Explorer
      MusicLover2112 went up a rank
      Explorer
    • Dedicated
      MadMung0 earned a badge
      Dedicated
    • Rookie
      CHUNWEI went up a rank
      Rookie
  • Popular Contributors

    1. 1
      +primortal
      508
    2. 2
      ATLien_0
      270
    3. 3
      +FloatingFatMan
      248
    4. 4
      +Edouard
      201
    5. 5
      snowy owl
      168
  • Tell a friend

    Love Neowin? Tell a friend!