Network/ISP problem

Discussion in 'iMac' started by annc, Apr 4, 2011.

  1. annc macrumors newbie

    Joined:
    Oct 12, 2009
    #1
    Hi - I have a problem with my isp. They are saying that my very very poor speeds are due to the fact that a tremendous amount of upload activity is coming from my imac. I am running osx version 10.6.7. I have checked my router stats which show nothing unusual, i have just run Terminal netstat -n and have five printout pages of info which might as well be double dutch. Would anyone be willing to see if there is anything unusual in my network activity if I post the stats here.

    Thanks so much

    Ann:D
     
  2. miles01110 macrumors Core

    miles01110

    Joined:
    Jul 24, 2006
    Location:
    The Ivory Tower (I'm not coming down)
    #2
    Posting your router status and the output of netstat won't help anyone, as they aren't applicable tools for your problem. If I had to guess what the culprit was I'd say you're probably using a Bittorrent client with an uncapped upload rate or amount.
     
  3. annc thread starter macrumors newbie

    Joined:
    Oct 12, 2009
    #3
    Thanks for that. I just need some advice regarding netstat results - they mean nothing to me and I need to refute (or not) that the reason for my very low internet speeds is because of the amount of upload data from my Mac. I only send a couple of e-mails a day and upload nothing else. I am worried that my Mac has malware etc. As I said, I closed all aps and ran netstat -n and had 5 pages of active internet connections, just need some help deciphering. If no one here can help, could you recommend a forum that could ? :D
     
  4. miles01110 macrumors Core

    miles01110

    Joined:
    Jul 24, 2006
    Location:
    The Ivory Tower (I'm not coming down)
    #4
    You might as well post what you have. Malware is possible, but relatively unlikely. In the future you could buy Little Snitch, a program that alerts you whenever your machine tries to make an outgoing connection.
     
  5. blevins321 macrumors 68030

    Joined:
    Dec 24, 2010
    Location:
    Winnipeg, MB
    #5
    I'll be happy to take a look. If you'd rather PM them that's fine too. Also download widget istat pro. It's free and will tell what your current bandwidth usage is- good way to see if idle upload is occurring.
     
  6. annc, Apr 4, 2011
    Last edited: Apr 5, 2011

    annc thread starter macrumors newbie

    Joined:
    Oct 12, 2009
    #6
    Hi - I have istat pro and from that it seems nothing much is going on. It is the following that makes me nervous:
    I need to post in two lots as there are to many characters.
    tcp4 66 0
    udp6 0 0 ::1.4500 *.*
    udp6 0 0 ::1.500 *.*
    udp6 0 0 fe80::1%lo0.4500 *.*
    udp6 0 0 fe80::1%lo0.500 *.*
    udp4 0 0
    udp6 0 0 fd8d:e69e:480e:5.4500 *.*
    udp6 0 0 fd8d:e69e:480e:5.500 *.*
    udp6 0 0 fe80::223:dfff:f.4500 *.*
    udp6 0 0 fe80::223:dfff:f.500 *.*
    *.*
    udp6 0 0 *.51954 *.*
    udp4 0 0 *.51954 *.*
    udp6 0 0 *.64303 *.*
    udp4 0 0 *.64303 *.*
    udp6 0 0 *.53277 *.*
    udp4 0 0 *.53277 *.*
    udp6 0 0 *.49753 *.*
    udp4 0 0 *.49753 *.*
    udp6 0 0 *.64439 *.*
    udp4 0 0 *.64439 *.*
    udp6 0 0 *.60930 *.*
    udp4 0 0 *.60930 *.*
    udp6 0 0 *.60186 *.*
    udp4 0 0 *.60186 *.*
    udp6 0 0 *.50301 *.*
    udp4 0 0 *.50301 *.*
    udp6 0 0 *.55522 *.*
    udp4 0 0 *.55522 *.*
    udp6 0 0 *.54363 *.*
    udp4 0 0 *.54363 *.*
    udp6 0 0 *.63755 *.*
    udp4 0 0 *.63755 *.*
    udp6 0 0 *.51930 *.*
    udp4 0 0 *.51930 *.*
    udp46 0 0 *.* *.*
    udp4 0 0 *.*
    udp6 0 0 fe80::223:dfff:f.123 *.*
    udp46 0 0 *.* *.*
    udp46 0 0 *.* *.*
    udp46 0 0 *.* *.*
    udp46 0 0 *.* *.*
    udp46 0 0 *.* *.*
    udp46 0 0 *.* *.*
    udp4 0 0 *.* *.*
    udp4 0 0 *.* *.*
    udp6 0 0 *.*
    udp4 0 0 *.*
    udp6 0 0 fe80::1%lo0.123 *.*
    udp6 0 0 ::1.123 *.*
    udp6 0 0 *.123 *.*
    udp4 0 0 *.123 *.*
    udp46 0 0 *.* *.*
    udp4 42000 0 *.631 *.*
    udp4 0 0 *.138 *.*
    udp4 0 0 *.137 *.*
    udp4 0 0 *.* *.*
    udp4 0 0 *.* *.*
    udp6 0 0 *.5353 *.*
    udp4 0 0 *.5353 *.*
    udp4 0 0 *.* *.*
    icm6 0 0 *.* *.*
     
  7. annc thread starter macrumors newbie

    Joined:
    Oct 12, 2009
    #7
    Second lot:
    Active LOCAL (UNIX) domain sockets
    Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr
    96b0a30 stream 0 0 0 8bde510 0 0 /tmp/launchd-91.7jSaMB/sock
    8bde510 stream 0 0 0 96b0a30 0 0
    8bdf170 stream 0 0 0 8bdf320 0 0
    8bdf320 stream 0 0 0 8bdf170 0 0
    96ae990 stream 0 0 0 a759ac0 0 0 /var/tmp/launchd/sock
    a759ac0 stream 0 0 0 96ae990 0 0
    8bdf7a0 stream 0 0 0 96b05b0 0 0
    96b05b0 stream 0 0 0 8bdf7a0 0 0
    a759d00 stream 0 0 0 a759be0 0 0 /var/run/mDNSResponder
    a759be0 stream 0 0 0 a759d00 0 0
    96b0130 stream 0 0 0 96ae5a0 0 0 /var/run/mDNSResponder
    96ae5a0 stream 0 0 0 96b0130 0 0
    96ae090 stream 0 0 0 96ae240 0 0 /var/run/pppconfd
    96ae240 stream 0 0 0 96ae090 0 0
    96ae1b0 stream 0 0 0 96ae360 0 0 /var/run/mDNSResponder
    96ae360 stream 0 0 0 96ae1b0 0 0
    96ae900 stream 0 0 a77b128 0 0 0 /tmp/ics133
    a7599a0 stream 0 0 a7604d0 0 0 0 /tmp/icssuis501
    96aeb40 stream 0 0 0 96aec60 0 0 /var/run/mDNSResponder
    96aec60 stream 0 0 0 96aeb40 0 0
    8bde480 stream 0 0 0 96af050 0 0 /var/run/usbmuxd
    96af050 stream 0 0 0 8bde480 0 0
    96af170 stream 0 0 0 96af200 0 0
    96af200 stream 0 0 0 96af170 0 0
    96af560 stream 0 0 0 96af4d0 0 0 /var/run/mDNSResponder
    96af4d0 stream 0 0 0 96af560 0 0
    96af5f0 stream 0 0 0 96af680 0 0 /var/run/mDNSResponder
    96af680 stream 0 0 0 96af5f0 0 0
    96af830 stream 0 0 0 8bdef30 0 0 /var/run/mDNSResponder
    8bdef30 stream 0 0 0 96af830 0 0
    96af7a0 stream 0 0 0 8bdefc0 0 0 /var/run/mDNSResponder
    8bdefc0 stream 0 0 0 96af7a0 0 0
    8bde5a0 stream 0 0 0 8bded80 0 0
    8bded80 stream 0 0 0 8bde5a0 0 0
    8bdecf0 stream 0 0 0 8bdec60 0 0
    8bdec60 stream 0 0 0 8bdecf0 0 0
    8bde6c0 stream 0 0 0 8bde360 0 0
    8bde360 stream 0 0 0 8bde6c0 0 0
    8bde000 stream 0 0 a0191ec 0 0 0 /tmp/launch-mWGAu7/org.x:0
    8bde1b0 stream 0 0 a019314 0 0 0 /tmp/launch-SGWUiW/Listeners
    96b07f0 stream 0 0 a01943c 0 0 0 /tmp/launch-p0yvJ9/Render
    8bde630 stream 0 0 a019a98 0 0 0 /tmp/launchd-91.7jSaMB/sock
    96b0eb0 stream 0 0 9fceb2c 0 0 0 /var/run/racoon.sock
    96b0c70 stream 0 0 0 96b06d0 0 0 /var/tmp/launchd/sock
    96b06d0 stream 0 0 0 96b0c70 0 0
    96b0d90 stream 0 0 0 8bde240 0 0
    8bde240 stream 0 0 0 96b0d90 0 0
    96b0e20 stream 0 0 0 8bdf680 0 0
    8bdf680 stream 0 0 0 96b0e20 0 0
    96b0640 stream 0 0 0 96b0490 0 0 /var/run/mDNSResponder
    96b0490 stream 0 0 0 96b0640 0 0
    8bde2d0 stream 0 0 0 96b0be0 0 0
    96b0be0 stream 0 0 0 8bde2d0 0 0
    96b0250 stream 0 0 0 96b0010 0 0 /var/run/mDNSResponder
    96b0010 stream 0 0 0 96b0250 0 0
    96afdd0 stream 0 0 0 96afcb0 0 0 /var/tmp/launchd/sock
    96afcb0 stream 0 0 0 96afdd0 0 0
    96afd40 stream 0 0 0 96afa70 0 0 /var/run/mDNSResponder
    96afa70 stream 0 0 0 96afd40 0 0
    96b01c0 stream 0 0 0 96afb00 0 0 /var/run/mDNSResponder
    96afb00 stream 0 0 0 96b01c0 0 0
    96afef0 stream 0 0 0 96af8c0 0 0
    96af8c0 stream 0 0 0 96afef0 0 0
    96afe60 stream 0 0 0 8bde990 0 0
    8bde990 stream 0 0 0 96afe60 0 0
    96afc20 stream 0 0 0 96b0760 0 0
    96b0760 stream 0 0 0 96afc20 0 0
    96b09a0 stream 0 0 0 8bdebd0 0 0 /var/run/mDNSResponder
    8bdebd0 stream 0 0 0 96b09a0 0 0
    96b0880 stream 0 0 0 96b0910 0 0
    96b0910 stream 0 0 0 96b0880 0 0
    96b0ac0 stream 0 0 0 96b0b50 0 0
    96b0b50 stream 0 0 0 96b0ac0 0 0
    8bde090 stream 0 0 0 8bde120 0 0
    8bde120 stream 0 0 0 8bde090 0 0
    8bde870 stream 0 0 0 8bde900 0 0
    8bde900 stream 0 0 0 8bde870 0 0
    8bdee10 stream 0 0 0 8bdeea0 0 0
    8bdeea0 stream 0 0 0 8bdee10 0 0
    8bdf200 stream 0 0 0 0 0 0
    8bdf560 stream 0 0 0 8bdf5f0 0 0
    8bdf5f0 stream 0 0 0 8bdf560 0 0
    8bdf710 stream 0 0 0 8bdf8c0 0 0
    8bdf8c0 stream 0 0 0 8bdf710 0 0
    8bdf950 stream 0 0 915fafc 0 0 0 /var/run/pppconfd
    8bdf9e0 stream 0 0 0 8bdfa70 0 0
    8bdfa70 stream 0 0 0 8bdf9e0 0 0
    8bdfdd0 stream 0 0 0 8bdfd40 0 0 /var/run/mDNSResponder
    8bdfd40 stream 0 0 0 8bdfdd0 0 0
    8bdfc20 stream 0 0 0 8bdfcb0 0 0
    8bdfcb0 stream 0 0 0 8bdfc20 0 0
    8bdfe60 stream 0 0 0 8bdfef0 0 0
    8bdfef0 stream 0 0 0 8bdfe60 0 0
    8bdff80 stream 0 0 0 8be0010 0 0 /var/tmp/launchd/sock
    8be0010 stream 0 0 0 8bdff80 0 0
    8be0130 stream 0 0 0 8be00a0 0 0 /var/tmp/launchd/sock
    8be00a0 stream 0 0 0 8be0130 0 0
    8be0250 stream 0 0 0 8be01c0 0 0
    8be01c0 stream 0 0 0 8be0250 0 0
    8be0370 stream 0 0 0 8be02e0 0 0
    8be02e0 stream 0 0 0 8be0370 0 0
    8be0520 stream 0 0 0 8be0400 0 0
    8be0400 stream 0 0 0 8be0520 0 0
    8be0640 stream 0 0 0 8be0490 0 0
    8be0490 stream 0 0 0 8be0640 0 0
    8be05b0 stream 0 0 0 8be06d0 0 0
    8be06d0 stream 0 0 0 8be05b0 0 0
    8be0760 stream 0 0 0 8be07f0 0 0
    8be07f0 stream 0 0 0 8be0760 0 0
    8be09a0 stream 0 0 8eac2e4 0 0 0 /var/tmp/launchd/sock
    8be0a30 stream 0 0 8eac40c 0 0 0 /private/var/run/cupsd
    8be0ac0 stream 0 0 8eac5c8 0 0 0 /var/run/usbmuxd
    8be0b50 stream 0 0 8eac65c 0 0 0 /var/run/asl_input
    8be0c70 stream 0 0 8eac784 0 0 0 /var/run/SCHelper
    8be0d00 stream 0 0 8eac818 0 0 0 /var/run/vpncontrol.sock
    8be0d90 stream 0 0 8eac8ac 0 0 0 /private/var/run/printtool
    8be0e20 stream 0 0 8eac940 0 0 0 /var/run/portmap.socket
    8be0f40 stream 0 0 8eac9d4 0 0 0 /var/run/mDNSResponder
    8be0eb0 stream 0 0 8eaca68 0 0 0 /var/run/com.apple.ActivityMonitor.socket
    96af320 dgram 0 0 0 96ae870 96ae870 0
    96ae870 dgram 0 0 0 96af320 96af320 0
    96ae510 dgram 0 0 0 96b0520 96b0520 0
    96b0520 dgram 0 0 0 96ae510 96ae510 0
    96aebd0 dgram 0 0 0 96af290 96af290 0
    96af290 dgram 0 0 0 96aebd0 96aebd0 0
    96aef30 dgram 0 0 0 a759a30 a759a30 0
    a759a30 dgram 0 0 0 96aef30 96aef30 0
    96aed80 dgram 0 0 0 96ae3f0 96ae3f0 0
    96ae3f0 dgram 0 0 0 96aed80 96aed80 0
    96aecf0 dgram 0 0 0 96ae6c0 96ae6c0 0
    96ae6c0 dgram 0 0 0 96aecf0 96aecf0 0
    96ae630 dgram 0 0 0 8bde3f0 8bde3f0 0
    8bde3f0 dgram 0 0 0 96ae630 96ae630 0
    96af710 dgram 0 0 0 8bdea20 8bdea20 0
    8bdea20 dgram 0 0 0 96af710 96af710 0
    96af9e0 dgram 0 0 0 96afb90 96afb90 0
    96afb90 dgram 0 0 0 96af9e0 96af9e0 0
    96b0f40 dgram 0 0 0 96b0d00 96b0d00 0
    96b0d00 dgram 0 0 0 96b0f40 96b0f40 0
    8bdf050 dgram 0 0 0 8bdf0e0 8bdf0e0 0
    8bdf0e0 dgram 0 0 0 8bdf050 8bdf050 0
    8bdfb90 dgram 0 0 0 8bdfb00 8bdfb00 0
    8bdfb00 dgram 0 0 0 8bdfb90 8bdfb90 0
    8be0be0 dgram 0 0 8eac6f0 0 0 0 /var/run/syslog
    Thank you all so much for any analysis of this. I am very grateful

    Ann
     
  8. lythium macrumors member

    Joined:
    Sep 25, 2009
    Location:
    IL
    #8
    How many windows computers do you have behind your router? Its more likely they are soaked with malware. Got kids? Are they seeding torrents/P2P? Spouse streaming a webcam for money?

    The nice thing about owning a Mac is that when something is wrong, you can almost immediately rule out the Mac as the cause of your issue.

    Further more, if your isp is telling you they are seeing traffic specifically from your imac, there is something else wrong. They should NOT be able to see passed your router(unless they own it of course), and make determinations about the status of your local LAN.
     
  9. blevins321 macrumors 68030

    Joined:
    Dec 24, 2010
    Location:
    Winnipeg, MB
    #9
    There's something about the number of DNSResponders that has me thinking it might be another PC in the network (you're being pinged maybe). If it's wireless, is it possible that a neighbor is hijacking your wifi?
     
  10. annc thread starter macrumors newbie

    Joined:
    Oct 12, 2009
    #10
    Hi - there are no other computers on my network at the moment, I have also disconnected my wifi printer, my nintendo wii and my mobile phone, so the only thing connected to the network at the time the stats were run was my ethernet connected Mac. If I look at my router's DHCP client list, there is just the Mac shown, nothing connecting wirelessly, no trace of anything piggybacking the network. That is what is worrying me.

    Thanks for all your help.

    Ann
     
  11. blevins321 macrumors 68030

    Joined:
    Dec 24, 2010
    Location:
    Winnipeg, MB
    #11
    Disconnect the router from the cable modem. Plug the iMac directly into it and leave it running overnight. Then call the cable company and ask them to check your bandwidth usage for the previous 24 hours.
     
  12. annc thread starter macrumors newbie

    Joined:
    Oct 12, 2009
    #12
    Sorry - can't do that - I have a combined modem router, all one and the same.
     
  13. Drewbie, Apr 4, 2011
    Last edited: Apr 4, 2011

    Drewbie macrumors member

    Joined:
    Aug 27, 2010
    #13
    then turn off wireless altogether for the router and connect it directly to your mac

    activity monitor will help monitor bandwidth usage in the network section. it logs incoming and outgoing data rates.



    also i would connect your mac for a night, have the company watch the usage
    then the next night i would connect a different computer or device and see if it differs from night to night...
     

Share This Page