11 gigs in 2 days, What the hell happened to my data allowance? was it updates?

Forums › One NZ (including Farmside) › 11 gigs in 2 days, What the hell happened to my data allowance? was it updates?

1 | 2 | 3 | 4

3892 posts

Uber Geek
+1 received by user: 164

#691028 25-Sep-2012 11:34

BlueShift: I see your profile pic - your day will come!

And sooner than you think...

Oh you have no idea.... he's 5 this week, that photo is a bit out dated... I've already got netflow data coming off the router so I can track where the usage is going if I want to.

D

Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz

Lurch

1061 posts

Uber Geek
+1 received by user: 71

#691077 25-Sep-2012 12:29

Don't play WoW do you? Latest addon has been downloading in the background as you play ;-)

fuzzythinker

28 posts

Geek
+1 received by user: 1

#691104 25-Sep-2012 13:12

Lurch: Don't play WoW do you? Latest addon has been downloading in the background as you play ;-)

No, not a gamer.

Thanks for the mentions of TUC and Netflow, will check them out

fuzzythinker

28 posts

Geek
+1 received by user: 1

#691339 25-Sep-2012 20:32

Okay so got a call and an email with a usage report from Vodafone which basically explains the amounts of data trafficked up and down and when.

Johnr will no doubt be pleased to hear the report came back saying that Voda had got their numbers right!

In any case the report has enabled us to narrow down the issue to my partners MacBookPro.

Whatsmore the traffic has mostly gone into uploading.

Using the process described bellow (thanks to RunningMan) we checked out what was currently happening on the networking usage front.

RunningMan:
kingjj: [snip] Not sure where the equivalent would be on your partners Mac.

Activity Monitor, in the Utilities folder (inside Applications folder).

Click on the network tab and it will tell you what's happening.

Even now seems to be quite a few packets going both up and down. I'm not to sure what this should be normally but my hunch that the issue hasn't gone away, but as this machine has been off most of the time traffic through the router has returned to normal.

What I need to do now is home in on where the problem is coming from within the machine and make sure it doesn't happen again.

Unfortunately at this point my partner started freaking out that her precious Mac could 'have a virus' so machine has been shut down and going to have to deal with the problem when she is out.

in order to do that I need to know:

Is this a Malware / Spyware / unknown nasty causing the high data traffic, and how to check that for a Mac?

Could it be part of an OS or app update process?

What other possibilities might their be and how to identify / eliminate (Mac users please help!) (note pretty sure its not Iphoto).

Cheers

KevinL

656 posts

Ultimate Geek
+1 received by user: 20

Trusted

#691341 25-Sep-2012 20:35

Has iCloud been enabled recently?

RunningMan

9186 posts

Uber Geek
+1 received by user: 4840

#691342 25-Sep-2012 20:35

Something trying to sync with an iCloud account or similar?

Apple TV

Stream your favourite shows now on Apple TV (affiliate link).

gehenna

8667 posts

Uber Geek
+1 received by user: 3883

Moderator

Trusted

Lifetime subscriber

#691346 25-Sep-2012 20:53

Or iTunes Match?

fuzzythinker

28 posts

Geek
+1 received by user: 1

#691385 25-Sep-2012 22:03

KevinL: Has iCloud been enabled recently?

That was my initial thought, but no, not enabled or even set up/ registered with.

Linuxluver

5833 posts

Uber Geek
+1 received by user: 1639

Trusted

Subscriber

#691429 25-Sep-2012 23:40

fuzzythinker: Woke up to an email from Vodafone saying we had gone over our monthly data allowance, according to vodafone tracker we used 11 gigs out of our 20 in 2 days.

Neither of us has done any abnormal browsing, just wondering of anyone else has experienced this issue? I know both Mircosoft and apple put out updates over the past few days, didn't think they could be that big.

Is there any way of finding out / tracking where the data was used?

If you use wifi, is there any chance your AP has been hacked? Might someone be using your network?

_____________________________________________________________________

I've been on Geekzone over 16 years..... Time flies....

hio77

'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified

Trusted

Lizard Networks

Subscriber

#691452 26-Sep-2012 00:19

might pay to have a look over on the vodafone forum, i notice their meter was playing up again, ironically the meter "recorded" usage over 2x what our line is possible of (at sync rates)....

http://forum.vodafone.co.nz/topic/10854-usage-meter-broken-again/page__pid__79731__st__0&#entry79731

last i heard from vodafone they were looking into it, however looked at my meter a few hours ago, and the last 3 days had been zeroed off, so ild assume a problem has been found...

vodafone do have issues with their metering sometimes, i suggest you run software to monitor usage, if theres a clear difference in the metering, give them a call, they generally fix it all up.

with the addition of macs in your network, im not sure on the best tool to do this, may come down to manual calculations..

with the addition of mobile devices, consoles etc metering can be rather hard however..

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

dan

1134 posts

Uber Geek
+1 received by user: 105

Lifetime subscriber

#691501 26-Sep-2012 08:13

Looks like the usage meter is now fixed, compared to yesterday, i now have +59GB more data to use this month, annoying since my billing cycle ends tommorow,

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

JohnButt

374 posts

Ultimate Geek
+1 received by user: 47

Trusted

#691504 26-Sep-2012 08:19

A little app called "Menu Meter" is a great early warning/bug finding tool. Puts a wee chart for network traffic into the top bar and then you can start searching for what is off/on by using the Activities monitor.

Look for an ad cookie, one may be sending "stuff" home, to remove these another little app called MacScan is useful

fuzzythinker

28 posts

Geek
+1 received by user: 1

#691505 26-Sep-2012 08:24

hio77: might pay to have a look over on the vodafone forum, i notice their meter was playing up again, ironically the meter "recorded" usage over 2x what our line is possible of (at sync rates)....

http://forum.vodafone.co.nz/topic/10854-usage-meter-broken-again/page__pid__79731__st__0&#entry79731

last i heard from vodafone they were looking into it, however looked at my meter a few hours ago, and the last 3 days had been zeroed off, so ild assume a problem has been found...

vodafone do have issues with their metering sometimes, i suggest you run software to monitor usage, if theres a clear difference in the metering, give them a call, they generally fix it all up.

with the addition of macs in your network, im not sure on the best tool to do this, may come down to manual calculations..

with the addition of mobile devices, consoles etc metering can be rather hard however..

I contacted Vodafone and they requested a data breakdown (which comes from a third party) so there doesn't seem to be any problem with Vodafone metering.

It also allowed us to isolate the problem to the MacBooKPro as the times are specifically when that machine was being used.

The question now is what was it on the Mac and how to stop it.

SESSION akl-ldv01001SSG04423765f22c122566
Sep 21 2012 22:16:16 NZST 27.252.230.137 akl-ldv01001SSG04423765f22c122566 0 51123627 0 443367884 0MB, 0MB
SESSION akl-ldv01001SSG008276305d15001335
Sep 22 2012 07:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 0 0 0 0MB, 0MB
Sep 22 2012 07:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 47617 0 114169 0MB, 0MB
Sep 22 2012 08:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 2206616 0 14675396 2MB, 13MB
Sep 22 2012 08:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 5371431 0 66036572 3MB, 48MB
Sep 22 2012 09:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 6242514 0 68499444 0MB, 2MB
Sep 22 2012 09:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 9420768 0 124701401 3MB, 53MB
Sep 22 2012 10:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 9690715 0 125673863 0MB, 0MB
Sep 22 2012 10:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 10154603 0 127427233 0MB, 1MB
Sep 22 2012 11:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 33560886 0 456119995 22MB, 313MB
Sep 22 2012 11:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 45611227 0 668856739 11MB, 202MB
Sep 22 2012 12:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 58931947 0 1006291364 12MB, 321MB
Sep 22 2012 12:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 59067175 0 1006506218 0MB, 0MB
Sep 22 2012 13:05:16 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 63036692 0 1009885479 3MB, 3MB
Sep 22 2012 13:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 105262802 0 1507706254 40MB, 474MB
Sep 22 2012 14:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 106939264 0 1592526628 1MB, 80MB
Sep 22 2012 14:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 107051473 0 1592707471 0MB, 0MB
Sep 22 2012 15:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 107182783 0 1592924677 0MB, 0MB
Sep 22 2012 15:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 107727949 0 1593499663 0MB, 0MB
Sep 22 2012 16:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 126694377 0 2126390978 18MB, 508MB
Sep 22 2012 16:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 132172995 0 2269669290 5MB, 136MB
Sep 22 2012 17:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 133931082 0 2341441782 1MB, 68MB
Sep 22 2012 17:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 140989025 0 2483862903 6MB, 135MB
Sep 22 2012 18:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 163152202 0 3082816799 21MB, 571MB
Sep 22 2012 18:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 163172179 0 3082844985 0MB, 0MB
Sep 22 2012 19:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 165645987 0 3140422522 2MB, 54MB
Sep 22 2012 19:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 165665730 0 3140438606 0MB, 0MB
Sep 22 2012 20:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 165700614 0 3140555864 0MB, 0MB
Sep 22 2012 20:35:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 165728946 0 3140618137 0MB, 0MB
Sep 22 2012 21:05:15 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 165925753 0 3141725851 0MB, 1MB
Sep 22 2012 21:30:55 NZST 118.93.9.81 akl-ldv01001SSG008276305d15001335 0 165927710 0 3141731498 0MB, 0MB
TOTAL IN=158MB,OUT=2996MB (3154MB)

dclegg

2806 posts

Uber Geek
+1 received by user: 810

Trusted

#691542 26-Sep-2012 09:32

BlueShift: I was having problems with my cap being blown after a couple of weeks. I managed to trace the cause though - it was because about thirteen years ago, we had a baby boy.

Ain't that the truth! We were easily fitting within our 60GB cap. Then our kids (14 and 11) discovered the joys of streaming YouTube on their iPods. We now sit at around 70-80GB. Thankfully our datacap was recently doubled to 120GB, which should see us right for the near future.

BlueShift

1692 posts

Uber Geek
+1 received by user: 969

#691554 26-Sep-2012 09:59

dclegg:
BlueShift: I was having problems with my cap being blown after a couple of weeks. I managed to trace the cause though - it was because about thirteen years ago, we had a baby boy.

Ain't that the truth! We were easily fitting within our 60GB cap. Then our kids (14 and 11) discovered the joys of streaming YouTube on their iPods. We now sit at around 70-80GB. Thankfully our datacap was recently doubled to 120GB, which should see us right for the near future.

We were just starting to regularly blow out our 20GB cap when they doubled it up to 40GB. That worked for about 2 months, then consumption rose to meet the new ceiling.

1 | 2 | 3 | 4