Network Traffic

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Network Traffic

Username1

56 posts

Master Geek
+1 received by user: 4

Topic # 198533 12-Jul-2016 23:21

So I haven't logged into my Slingshot account in a while but after doing so today I've noticed that the data usage has gone up heaps in the last 4 months! I don't believe anyone in the house is using that much more data all of a sudden. Is there an easy way to track down whats using so much data or where do I start?

michaelmurfy

Meow
7914 posts

Uber Geek
+1 received by user: 3935

Moderator

Trusted

Lifetime subscriber

Reply # 1590667 12-Jul-2016 23:28

One person supports this post

What kind of router do you have? Could be your router acting as an open DNS resolver.

Ensure your IP is not resolving by using this: http://openresolver.com/

Michael Murphy | https://murfy.nz
A quick guide to picking the right ISP | The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial

michael001

161 posts

Master Geek
+1 received by user: 64
Inactive user

Reply # 1590767 13-Jul-2016 06:40

If my math is correct, you've gone from a regular 300gb to an almost 4tb a month, which was sudden and it appears to be getting worse?

If you are clean and clear with the open resolver linked above, I'd be googling up some free network monitoring software to identify the computer or device that is generating the traffic.

Once identified, I'd unplug the device and confirm the traffic has stopped. The free software would hopefully do this for you.

From there I would make a decision on what to do with it. The only real decision for me would be how much to back up from it (I would be aiming for zero) before formatting it or throwing it out in the garage behind the box of bicycle parts.

You learn more as you go, you may find out that several devices are creating the traffic, I'd re-assess at each step to decide next course of action.

thecatsgoolies

400 posts

Ultimate Geek
+1 received by user: 224

Trusted

Reply # 1590784 13-Jul-2016 07:54

Scan any PC's with Malwarebytes (free edition)

Username1

56 posts

Master Geek
+1 received by user: 4

Reply # 1593391 15-Jul-2016 21:28

2 people support this post

michaelmurfy:

What kind of router do you have? Could be your router acting as an open DNS resolver.

Ensure your IP is not resolving by using this: http://openresolver.com/

I'm such an idiot! When I switched to the RouterBOARD 962UiGS-5HacT2HnT I forgot to change any of the default firewall rules. Now its not resolving anymore and data use is back to normal with 15GB used in past 24 hours. Thank you for your suggestion!

PhantomNVD

2480 posts

Uber Geek
+1 received by user: 679

Reply # 1593427 16-Jul-2016 04:05

4 people support this post

Here's the reason Unlimited Broadband should post useage stats. The user solved the problem here before the ISP even noticed!

+1 to SlingShot!!

hio77

'That VDSL Cat'
8707 posts

Uber Geek
+1 received by user: 1886

Trusted

Spark

Subscriber

Reply # 1593713 16-Jul-2016 23:05

PhantomNVD: Here's the reason Unlimited Broadband should post useage stats. The user solved the problem here before the ISP even noticed!

+1 to SlingShot!!

Personally im well in the field of isps should block by default DNS outbound. Its already done for mail ports commonly

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Aredwood

3118 posts

Uber Geek
+1 received by user: 1208

Subscriber

Reply # 1595939 21-Jul-2016 01:07

One person supports this post

I think they should just do a simple open resolver check on your connection whenever a new PPP session is started. And then redirect to a walled garden page if one is detected.