How can I find out what is using all of my upload bandwidth?


Recommended Posts

Something is randomly using all of my upload bandwidth, which makes my connection crawl.

I do not have spyware, adware or a virus.

How can I find out what process is doing this?

EDIT: This only started happening after I installed NetBalancer. However, it was uninstalled hours ago and I have rebooted, so I'm unsure how it can even be related.

Windows 7 x64 SP1.

EDIT: I rang Sky Broadband, they said it was an issue at the local hub and that it will be fixed within 30 minutes. I read a book for an hour, came back and the connection is now all good. Sorry, guys! Just seemed a massive co-incidence.

Look at the Task manager -- ctrl-alt-delete.

What processes are running ?

Also it may be a rootkit, and something has made your PC a zombie.

Do a rootkit scan.

http://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx

  On 24/07/2011 at 13:14, Hum said:

Look at the Task manager -- ctrl-alt-delete.

What processes are running ?

Also it may be a rootkit, and something has made your PC a zombie.

Do a rootkit scan.

http://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx

I have no rootkits. Only novices get rootkits, spyware, adware or virus'.

This only started happening after I installed NetBalancer. However, it was uninstalled hours ago and I have rebooted, so I'm unsure how it can even be related.

Maybe I should call Sky Broadband, it could be an issue on their end (i.e. a co-incidence).

  Quote
I have no rootkits. Only novices get rootkits, spyware, adware or virus'.

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the superiority complex. If you can't rule it out (and opinion rules nothing out) then it still exists.

  • Like 2
  On 24/07/2011 at 13:24, njlouch said:

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the attitude.

There is no attitude. It's very true. Just because I find it very easy to avoid getting rootkits, spyware, adware or viruses, it doesn't mean I know what software you guys recommend to discover what processes are using my bandwidth. I know that NetLimter can tell me what processes are using my bandwidth but in case that program is calling this issue, I am of course reluctant to re-install it.

The reason I know it's not a rootkit is because I doubt very much it's a co-incidence that NetLimiter was installed/uninstalled an hour before this issue occurred.

For ****s and giggles, I'll run Sophos Anti-Rootkit.

  On 24/07/2011 at 13:29, Detection said:

I think the clue is in the name "NetLimter "

Sounds like it has left something behind after the uninstall

That is not logical. The program was used to stop Firefox using all of my 130 KB/s upload bandwidth. I used it to limit Firefox to using a maximum of 95 KB/s in upload bandwidth. I then uninstalled it as, even though it worked, I decided just to go ahead and let Firefox do what it wishes.

So why would that program, installed or not, be doing this to my connection...?

EDIT: Sophos Anti-Rootkit found nothing suspicious. As expected.

As it is designed to limit bandwidth, your issue is bandwidth related, and it started around the time you installed and uninstalled this program I would say its more likely to be that than a coincidence.

I vaguely remember installing something similar if not the same program a while ago and completely losing my connection, programs like this install drivers I think, check hidden items in the device manager / services running in services.msc etc

If it all fails, as posted above, system restore to before the issue

  On 24/07/2011 at 13:36, Detection said:

As it is designed to limit bandwidth, your issue is bandwidth related, and it started around the time you installed and uninstalled this program I would say its more likely to be that than a coincidence.

I vaguely remember installing something similar if not the same program a while ago and completely losing my connection, programs like this install drivers I think, check hidden items in the device manager / services running in services.msc etc

If it all fails, as posted above, system restore to before the issue

It does install a service but from what I can tell, there appears to be no related services on my computer :/

  On 24/07/2011 at 13:36, _DP said:

Do you get the same issue with other browsers?

This is happening system-wide. For example, I can be playing a game fine then a few seconds later, I get 900 ping before getting kicked. It's then that I realize something was uploading using all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds.

If your looking to track what process is using upload, you could run tcpview http://technet.microsoft.com/en-us/sysinternals/bb897437

You could run wireshark as well - great FREE protocol analyzer http://www.wireshark.org/ to see what is actually being put on the wire, etc. but what show you what process did it, just what is being done.

Or you could put netlimiter back on ;) It shows you what is using bandwidth heeheheh

I rang Sky Broadband, they said it was an issue at the local hub and that it will be fixed within 30 minutes. I read a book for an hour, came back and the connection is now all good. Sorry, guys! Just seemed a massive co-incidence.

I wasn't trying to be douchey earlier when I said it's not difficult to avoid getting rootkits, spyware, adware or viruses, it just really is easy to avoid them in my opinion :s Stick to legitimate websites, check comments when downloading torrents, keep your Windows and MSE up-to-date, don't start using dodgy Facebook apps etc. and you will be fine!

"all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds. "

Um how is your box uploading an issue at the local hub?

  On 24/07/2011 at 13:45, BudMan said:

"all of my 130 KB/s upload speed. I am using Rainmeter to find my current system down/up speeds. "

Um how is your box uploading an issue at the local hub?

I am not sure. The ping issues were due to an problem at the local LLU according to Sky Broadband and when they said it would be fixed in about 30 minutes, they were right!

Sounds like a common sense solution.. the program you installed which was "NetBalancer" has screwed with Winsock... you need to reset this.

Open up command prompt.... and type the following just as I've put it spaces and all:

netsh winsock reset catalog - Hit Enter

netsh int ip reset reset.log hit - Hit Enter

Now Reboot and test again.

Even if you think your problem is solved don't put that junk netbalancer back on there..its nothing but a sandbox and useless...control your bandwidth or monitor it using your router. Run these reset lines to get Windows7 winsock stacks back to default the way its supposed to be if anything did in fact alter it.

  On 24/07/2011 at 13:24, njlouch said:

Well, you claim not to be a novice but can't even track your usage?

Check for rootkits and drop the superiority complex. If you can't rule it out (and opinion rules nothing out) then it still exists.

Actually with most home routers it's not that easy to get per device bandwidth usage data.

Even the ones that allow collecting the data via something like SNMP usually only go down to the port level, which is no good in the case of wireless or if there's a switch further upstream of that port.

"I am not sure. The ping issues were due to an problem at the local LLU"

And are you still seeing an upload of 130 when your not doing anything?

And I agree with xbamaris the resource monitor in w7 is perfect tool for looking this up, not sure why I forgot it other than just habit from older windows versions not having the ability to look at this. But yes that is the best suggestion for looking to see what is uploading.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Mozilla fixes Firefox crashes on Windows by Taras Buria Mozilla is rolling out yet another update for the Firefox browser. Version 140.0.2 follows the just-released version 140.0.1 to address more bugs causing crashes on Windows in certain scenarios. Here is what the release notes say: Fixed a startup crash on Windows experienced by some users. (Bug 1974259) According to a post on Bugzilla, Mozilla's bug tracker for Firefox, the browser crashes with the ERROR_INVALID_HANDLE or ERROR_INVALID_PARAMETER error. This happens when Exploit Protection is enabled in Windows security settings. While that is a feature a regular user is unlikely to fiddle with, Exploit Protection is enabled for apps from the Microsoft Store. As such, crashes are most likely occurring for users with Firefox downloaded from the Microsoft Store. Still, if Exploit Protection is enabled globally, "standard" Firefox downloaded from the official website also fails. Note that the bug does not affect newer Firefox versions. Now, with Firefox 140.0.2 out, the browser should no longer crash regardless of your security settings or the browser origin. For reference, you can find the release notes for the latest update here; for version 140.0.1 (which fixed a couple of crash-inducing bugs), here; and for version 140.0 (a major release), here. As usual, you can update Firefox by heading to Menu > Help > About Firefox. The browser is available on the official website, in the Microsoft Store for Windows 10 and 11 users, or on Neowin's Software page.
    • They are always there, available third week every month, not fully public tho
    • Lol, sounds like you're not up to date with reality and are just repeating what the salesman told ya. Here's a little insight for you: Electric Cars Are Way Less Reliable Than ICE Cars, Says Consumer Reports. Alas, you're entitled to your wrong opinion.
    • misleading its one word to describe what M$ have done, windows 10 perform better on older hardware and even on new hardware sometimes, windows 11 its a mess and no one want to use it for many good reasons, until they listen its customers read the feedback hub comments and maybe backoff its forced requiremens, they are having a vista and 8 moment.
    • Media Player Classic - Home Cinema 2.5.0 by Razvan Serea Media Player Classic - Home Cinema (MPC-HC) is a free and open-source video and audio player for Windows. MPC-HC is based on the original Guliverkli project (which is no longer maintained) and contains many additional features and bug fixes. As the continuation of the original Media Player Classic, MPC-HC isn’t flashy but it works with nearly any media format. MPC-HC uses DXVA technology to pass decoding operations to your modern video card, enhancing your viewing experience. And MPC-HC supports both physical and software DVDs with menus, chapter navigation, and subtitles. Overview of features A lot of people seem to be unaware of some of the awesome features that have been added to MPC-HC in the past years. Here is a list of useful options and features that everyone should know about: Dark interface Menu > View > Dark Theme When using dark theme it is also possible to change the height of the seekbar and size of the toolbar buttons. Options > Advanced Video preview on the seekbar Options > Tweaks > Show preview on seek bar Adjust playback speed Menu > Play > Playback rate The buttons in the player that control playback rate take a 2x step by default. This can be customized to smaller values (like 10%): Options > Playback > Speed step Adjusting playback speed works best with the internal audio renderer. This also has automatic pitch correction. Options > Playback > Output > Audio Renderer MPC-HC can remember playback position, so you can resume from that point later Options > Player > History You can quickly seek through a video with Ctrl + Mouse Scrollwheel. You can jump to next/previous file in a folder by pressing PageUp/PageDown. You can perform automatic actions at end of file. For example to go to next file or close player. Options > Playback > After Playback (permanent setting) Menu > Play > After Playback (for current file only) A-B repeat - You can loop a segment of a video. Press [ and ] to set start and stop markers. You can rotate/flip/mirror/stretch/zoom the video Menu > View > Pan&Scan This is also easily done with hotkeys (see below). There are lots of keyboard hotkeys and mouse actions to control the player. They can be customized as well. Options > Player > Keys Tip: there is a search box above the table. You can stream videos directly from Youtube and many other video websites You can stream videos directly from Youtube and many other video websites Put yt-dlp.exe or youtube-dl.exe in the MPC-HC installation folder. Then you can open website URLs in the player: Menu > File > Open File/URL You can even download those videos: Menu > File > Save a copy Tip: to be able to download in best quality with yt-dlp/youtube-dl, it is recommended to also put ffmpeg.exe in the MPC-HC folder. Several YDL configuration options are found here: Options > Advanced This includes an option to specify the location of the .exe in case you don't want to put it in MPC-HC folder. Play HDR video This requires using madVR or MPC Video Renderer. After installation these renderers can be selected here: Options > Playback > Output Ability to search for and download subtitles, either automatically or manually (press D): Options > Subtitles > Misc Besides all these (new) features, there have also been many bugfixes and internal improvements in the player in the past years that give better performance and stability. It also has updated internal codecs. Support was added for CUE sheets, WebVTT subtitles, etc. Media Player Classic - Home Cinema 2.5.0 changelog: Updated LAV Filters to version 0.80-1-gb9116 Updated MPC Video Renderer to version 0.9.9.2400 Several small fixes and improvements. Graphics Designers Wanted for New Toolbar Buttons A new toolbar is planned for implementation in the player, featuring optional extra buttons and fully customizable layouts. As a result, existing custom toolbar designs will no longer be supported in the future. New button designs are needed, and contributions from graphics designers are welcome. Those interested in helping create the new toolbar are encouraged to read the dedicated information page. Download: MPC-HC 2.5.0 (x64) | Standalone | ~20.0 MB (Open Source) Download: MPC-HC 2.5.0 (x86) | Standalone Links: MPC-HC Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • Week One Done
      emptyother earned a badge
      Week One Done
    • Week One Done
      DarkWun earned a badge
      Week One Done
    • Very Popular
      valkyr09 earned a badge
      Very Popular
    • Week One Done
      suprememobiles earned a badge
      Week One Done
    • Week One Done
      Marites earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      570
    2. 2
      ATLien_0
      181
    3. 3
      +FloatingFatMan
      173
    4. 4
      Xenon
      124
    5. 5
      Michael Scrip
      114
  • Tell a friend

    Love Neowin? Tell a friend!