Well over cap. Any idea?

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Well over cap. Any idea?

wirEnz

4 posts

Wannabe Geek

#138976 23-Jan-2014 17:54

OK, sorry for this to be my first post, but hello all, and I do read these forums a lot just never signed up until now.

Anyway, I am currently on orcons adsl2 80 gig cap plan, and avg about 50 - 60 gigs a month, went away on the long weekend and when I got back I checked my cap, on Friday Saturday Sunday and Monday my internet had downloaded an avg of 21 gigs aday, now if I had left a download on I would accept it and just pay the bill, but my PC was off over the weekend, so I lodged a ticket Monday night, and still haven't had a response but I just thought some smart bugger had just figured out my wifi password.

so Monday night I disabled wifi on the router and figured the downloading would stop, so got up for work at 7 Tuesday morning all seemed to be running fine, switched PC off and went to work, arrived home at 5 checked usage, in the 9 hours I was at work it had downloaded 8 gigs..... no wifi on so no one could be using it, PC was off completely and my laptop and phone which use my wifi were at work with me. so I rang help desk and got person that I could hardly understand and all he told me to do was turn the modem off for 24 hours, which I did.

turned back on Wednesday and everything has been fine. but the thing is what has gone wrong? helpdesk haven't said anything I haven't received a call or email like I was meant to, (I understand they have other customers) but I'm going to be billed for something that really was out of my control, I do understand how to use P2P programs and all that and the program I use (which I wasn't at the time of this, pc wasn't even on) deletes the torrent after its finished anyway.

so I was wondering since orcon push their own updates to the modem, could have some how got stuck and downloaded uploaded over and over again?, and after resetting the router it fixed the problem?

its just almost 90 gigs over cap, and at 2 bucks a gig, the next bill is going to be a lot more then I was excepting to pay, look forward to reading some of the responses.

Andrew

EDIT!! plus I have also got a plan change in the works switching to VDSL Saturday 25, would this some how affect my usage?

gehenna

8499 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#973064 23-Jan-2014 18:16

Children?

wirEnz

4 posts

Wannabe Geek

#973066 23-Jan-2014 18:18

Nope live alone.

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#973094 23-Jan-2014 19:25

re : VDSL.... well... if youre doing 20GB a day on ADSL, triple that amount easy on VDSL ;)

Wonder if somehow your meter is showing someone elses usage as well.... Im sure one of the Orcon guys will respond soon and assist.

Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

LinkTree

FireEngine

1223 posts

Uber Geek

Trusted

#973158 23-Jan-2014 20:38

wirEnz: OK, sorry for this to be my first post, but hello all, and I do read these forums a lot just never signed up until now.

Anyway, I am currently on orcons adsl2 80 gig cap plan, and avg about 50 - 60 gigs a month, went away on the long weekend and when I got back I checked my cap, on Friday Saturday Sunday and Monday my internet had downloaded an avg of 21 gigs aday, now if I had left a download on I would accept it and just pay the bill, but my PC was off over the weekend, so I lodged a ticket Monday night, and still haven't had a response but I just thought some smart bugger had just figured out my wifi password.

so Monday night I disabled wifi on the router and figured the downloading would stop, so got up for work at 7 Tuesday morning all seemed to be running fine, switched PC off and went to work, arrived home at 5 checked usage, in the 9 hours I was at work it had downloaded 8 gigs..... no wifi on so no one could be using it, PC was off completely and my laptop and phone which use my wifi were at work with me. so I rang help desk and got person that I could hardly understand and all he told me to do was turn the modem off for 24 hours, which I did.

turned back on Wednesday and everything has been fine. but the thing is what has gone wrong? helpdesk haven't said anything I haven't received a call or email like I was meant to, (I understand they have other customers) but I'm going to be billed for something that really was out of my control, I do understand how to use P2P programs and all that and the program I use (which I wasn't at the time of this, pc wasn't even on) deletes the torrent after its finished anyway.

so I was wondering since orcon push their own updates to the modem, could have some how got stuck and downloaded uploaded over and over again?, and after resetting the router it fixed the problem?

its just almost 90 gigs over cap, and at 2 bucks a gig, the next bill is going to be a lot more then I was excepting to pay, look forward to reading some of the responses.

Andrew

EDIT!! plus I have also got a plan change in the works switching to VDSL Saturday 25, would this some how affect my usage?

Hi Andrew, Thanks for lodging all the details including the modem log with us. I see our Head of Residential Assurance tried to call you today to discuss. He will no doubt try again tomorrow and I will check with him but to clarify some points you have raised here:

Your modem log would seem to indicate 3 separate ip addresses concurrenty in use, you refer to a single PC so can you account for those devices? Phone/tablet? I can't tell if they have been connected on ethernet or WiFi but you will be able to via the modem GUI.

We don't continually push updates, they are issued under strict control at only particular times months apart (as updates are available) so it is certainly not that.

Can I ask if you have modified or disabled the firewall built into the Genius? One possibility is that your ip was under attack, that fact that there was substantial upload at the same time as high download and while your PC was turned off would indicate an attack profile. This is further supported by your router reboot, when you did this you would have been issued a different ip address, if the original ip address was under attack then the attack traffic would have ceased at that point to affect your usage.

Most of your log traffic is normal Genius SIP keep-alive traffic that would only account for a few MB over the course of a month. That said, your history log has a lot of traffic in it that doesn't appear in my Genius log file (see guys, there is value in us being on the same connections as customers :-) ) - I will need to run the contents of your log past our network engineers for comment.

You have placed the usage into dispute so don't sweat about it too much, I'll get back to you Friday about it.

Edited to add: No, your upcoming plan change won't affect your usage now. Are you going Unlimited?

Regards FireEngine

wirEnz

4 posts

Wannabe Geek

#973311 24-Jan-2014 07:35

Thank you for the reply :), yeah I must have missed the call, best way to get me is on mobile phone, yeah as I say once the modem was reset the usage went back to normal, and yeah I did notice the upload being rather high lol, and no I have left the modem and windows firewall as is out of the box, as for VDSL, still on 80 gig plan, was going to do a trail and see how I was with my standard usage, and switch after a month if I need to.

I wouldn't care paying the extra if I use it, I liked having the option where if I did go over my cap I could keep the same speeds I just live with the cost.

thank you for the reply.

lasc

11 posts

Geek

Trusted

#973354 24-Jan-2014 09:19

In some cases you can upgrade data cap for current period. So just jump to Unlimited plan for $99 or something(it has to be done before billing)
It should be offered you on change plan wizard

FireEngine

1223 posts

Uber Geek

Trusted

#973355 24-Jan-2014 09:22

Hi Andrew, the INFORM message etc are all DHCP traffic on the lan side, did you have any thoughts about the 3 ip addresses listed?

I'll pm you regarding the overage.

Regards FireEngine

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

wirEnz

4 posts

Wannabe Geek

#973358 24-Jan-2014 09:26

Yeah the 3 ip address will be my Iphone and laptop, but they were at work with me, but they weren't connected at that time, so no idea about IP addresses if they were connected at the time, and my laptop was with me while I was out on the weekend, got home about 2am most nights.

Nebbie

458 posts

Ultimate Geek

Trusted

#973563 24-Jan-2014 14:18

Usually somewhere under DHCP licences there sometimes is a hostname or MAC address.

Also I noticed you said it stopped after you turned off your modem, Its possible you were getting flooded with bad and your router got a few address. Like a suck P2P session on a PC somewhere in the world still attempting to send you chunks over and over.

---------------------------------------------------------------
Nebukadnessar