Hi - I have a problem with my isp. They are saying that my very very poor speeds are due to the fact that a tremendous amount of upload activity is coming from my imac. I am running osx version 10.6.7. I have checked my router stats which show nothing unusual, i have just run Terminal netstat -n and have five printout pages of info which might as well be double dutch. Would anyone be willing to see if there is anything unusual in my network activity if I post the stats here. Thanks so much Ann
Posting your router status and the output of netstat won't help anyone, as they aren't applicable tools for your problem. If I had to guess what the culprit was I'd say you're probably using a Bittorrent client with an uncapped upload rate or amount.
Thanks for that. I just need some advice regarding netstat results - they mean nothing to me and I need to refute (or not) that the reason for my very low internet speeds is because of the amount of upload data from my Mac. I only send a couple of e-mails a day and upload nothing else. I am worried that my Mac has malware etc. As I said, I closed all aps and ran netstat -n and had 5 pages of active internet connections, just need some help deciphering. If no one here can help, could you recommend a forum that could ?
You might as well post what you have. Malware is possible, but relatively unlikely. In the future you could buy Little Snitch, a program that alerts you whenever your machine tries to make an outgoing connection.
I'll be happy to take a look. If you'd rather PM them that's fine too. Also download widget istat pro. It's free and will tell what your current bandwidth usage is- good way to see if idle upload is occurring.
Hi - I have istat pro and from that it seems nothing much is going on. It is the following that makes me nervous: I need to post in two lots as there are to many characters. tcp4 66 0 udp6 0 0 ::1.4500 *.* udp6 0 0 ::1.500 *.* udp6 0 0 fe80::1%lo0.4500 *.* udp6 0 0 fe80::1%lo0.500 *.* udp4 0 0 udp6 0 0 fd8d:e69e:480e:5.4500 *.* udp6 0 0 fd8d:e69e:480e:5.500 *.* udp6 0 0 fe80::223:dfff:f.4500 *.* udp6 0 0 fe80::223:dfff:f.500 *.* *.* udp6 0 0 *.51954 *.* udp4 0 0 *.51954 *.* udp6 0 0 *.64303 *.* udp4 0 0 *.64303 *.* udp6 0 0 *.53277 *.* udp4 0 0 *.53277 *.* udp6 0 0 *.49753 *.* udp4 0 0 *.49753 *.* udp6 0 0 *.64439 *.* udp4 0 0 *.64439 *.* udp6 0 0 *.60930 *.* udp4 0 0 *.60930 *.* udp6 0 0 *.60186 *.* udp4 0 0 *.60186 *.* udp6 0 0 *.50301 *.* udp4 0 0 *.50301 *.* udp6 0 0 *.55522 *.* udp4 0 0 *.55522 *.* udp6 0 0 *.54363 *.* udp4 0 0 *.54363 *.* udp6 0 0 *.63755 *.* udp4 0 0 *.63755 *.* udp6 0 0 *.51930 *.* udp4 0 0 *.51930 *.* udp46 0 0 *.* *.* udp4 0 0 *.* udp6 0 0 fe80::223:dfff:f.123 *.* udp46 0 0 *.* *.* udp46 0 0 *.* *.* udp46 0 0 *.* *.* udp46 0 0 *.* *.* udp46 0 0 *.* *.* udp46 0 0 *.* *.* udp4 0 0 *.* *.* udp4 0 0 *.* *.* udp6 0 0 *.* udp4 0 0 *.* udp6 0 0 fe80::1%lo0.123 *.* udp6 0 0 ::1.123 *.* udp6 0 0 *.123 *.* udp4 0 0 *.123 *.* udp46 0 0 *.* *.* udp4 42000 0 *.631 *.* udp4 0 0 *.138 *.* udp4 0 0 *.137 *.* udp4 0 0 *.* *.* udp4 0 0 *.* *.* udp6 0 0 *.5353 *.* udp4 0 0 *.5353 *.* udp4 0 0 *.* *.* icm6 0 0 *.* *.*
Second lot: Active LOCAL (UNIX) domain sockets Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr 96b0a30 stream 0 0 0 8bde510 0 0 /tmp/launchd-91.7jSaMB/sock 8bde510 stream 0 0 0 96b0a30 0 0 8bdf170 stream 0 0 0 8bdf320 0 0 8bdf320 stream 0 0 0 8bdf170 0 0 96ae990 stream 0 0 0 a759ac0 0 0 /var/tmp/launchd/sock a759ac0 stream 0 0 0 96ae990 0 0 8bdf7a0 stream 0 0 0 96b05b0 0 0 96b05b0 stream 0 0 0 8bdf7a0 0 0 a759d00 stream 0 0 0 a759be0 0 0 /var/run/mDNSResponder a759be0 stream 0 0 0 a759d00 0 0 96b0130 stream 0 0 0 96ae5a0 0 0 /var/run/mDNSResponder 96ae5a0 stream 0 0 0 96b0130 0 0 96ae090 stream 0 0 0 96ae240 0 0 /var/run/pppconfd 96ae240 stream 0 0 0 96ae090 0 0 96ae1b0 stream 0 0 0 96ae360 0 0 /var/run/mDNSResponder 96ae360 stream 0 0 0 96ae1b0 0 0 96ae900 stream 0 0 a77b128 0 0 0 /tmp/ics133 a7599a0 stream 0 0 a7604d0 0 0 0 /tmp/icssuis501 96aeb40 stream 0 0 0 96aec60 0 0 /var/run/mDNSResponder 96aec60 stream 0 0 0 96aeb40 0 0 8bde480 stream 0 0 0 96af050 0 0 /var/run/usbmuxd 96af050 stream 0 0 0 8bde480 0 0 96af170 stream 0 0 0 96af200 0 0 96af200 stream 0 0 0 96af170 0 0 96af560 stream 0 0 0 96af4d0 0 0 /var/run/mDNSResponder 96af4d0 stream 0 0 0 96af560 0 0 96af5f0 stream 0 0 0 96af680 0 0 /var/run/mDNSResponder 96af680 stream 0 0 0 96af5f0 0 0 96af830 stream 0 0 0 8bdef30 0 0 /var/run/mDNSResponder 8bdef30 stream 0 0 0 96af830 0 0 96af7a0 stream 0 0 0 8bdefc0 0 0 /var/run/mDNSResponder 8bdefc0 stream 0 0 0 96af7a0 0 0 8bde5a0 stream 0 0 0 8bded80 0 0 8bded80 stream 0 0 0 8bde5a0 0 0 8bdecf0 stream 0 0 0 8bdec60 0 0 8bdec60 stream 0 0 0 8bdecf0 0 0 8bde6c0 stream 0 0 0 8bde360 0 0 8bde360 stream 0 0 0 8bde6c0 0 0 8bde000 stream 0 0 a0191ec 0 0 0 /tmp/launch-mWGAu7/org.x:0 8bde1b0 stream 0 0 a019314 0 0 0 /tmp/launch-SGWUiW/Listeners 96b07f0 stream 0 0 a01943c 0 0 0 /tmp/launch-p0yvJ9/Render 8bde630 stream 0 0 a019a98 0 0 0 /tmp/launchd-91.7jSaMB/sock 96b0eb0 stream 0 0 9fceb2c 0 0 0 /var/run/racoon.sock 96b0c70 stream 0 0 0 96b06d0 0 0 /var/tmp/launchd/sock 96b06d0 stream 0 0 0 96b0c70 0 0 96b0d90 stream 0 0 0 8bde240 0 0 8bde240 stream 0 0 0 96b0d90 0 0 96b0e20 stream 0 0 0 8bdf680 0 0 8bdf680 stream 0 0 0 96b0e20 0 0 96b0640 stream 0 0 0 96b0490 0 0 /var/run/mDNSResponder 96b0490 stream 0 0 0 96b0640 0 0 8bde2d0 stream 0 0 0 96b0be0 0 0 96b0be0 stream 0 0 0 8bde2d0 0 0 96b0250 stream 0 0 0 96b0010 0 0 /var/run/mDNSResponder 96b0010 stream 0 0 0 96b0250 0 0 96afdd0 stream 0 0 0 96afcb0 0 0 /var/tmp/launchd/sock 96afcb0 stream 0 0 0 96afdd0 0 0 96afd40 stream 0 0 0 96afa70 0 0 /var/run/mDNSResponder 96afa70 stream 0 0 0 96afd40 0 0 96b01c0 stream 0 0 0 96afb00 0 0 /var/run/mDNSResponder 96afb00 stream 0 0 0 96b01c0 0 0 96afef0 stream 0 0 0 96af8c0 0 0 96af8c0 stream 0 0 0 96afef0 0 0 96afe60 stream 0 0 0 8bde990 0 0 8bde990 stream 0 0 0 96afe60 0 0 96afc20 stream 0 0 0 96b0760 0 0 96b0760 stream 0 0 0 96afc20 0 0 96b09a0 stream 0 0 0 8bdebd0 0 0 /var/run/mDNSResponder 8bdebd0 stream 0 0 0 96b09a0 0 0 96b0880 stream 0 0 0 96b0910 0 0 96b0910 stream 0 0 0 96b0880 0 0 96b0ac0 stream 0 0 0 96b0b50 0 0 96b0b50 stream 0 0 0 96b0ac0 0 0 8bde090 stream 0 0 0 8bde120 0 0 8bde120 stream 0 0 0 8bde090 0 0 8bde870 stream 0 0 0 8bde900 0 0 8bde900 stream 0 0 0 8bde870 0 0 8bdee10 stream 0 0 0 8bdeea0 0 0 8bdeea0 stream 0 0 0 8bdee10 0 0 8bdf200 stream 0 0 0 0 0 0 8bdf560 stream 0 0 0 8bdf5f0 0 0 8bdf5f0 stream 0 0 0 8bdf560 0 0 8bdf710 stream 0 0 0 8bdf8c0 0 0 8bdf8c0 stream 0 0 0 8bdf710 0 0 8bdf950 stream 0 0 915fafc 0 0 0 /var/run/pppconfd 8bdf9e0 stream 0 0 0 8bdfa70 0 0 8bdfa70 stream 0 0 0 8bdf9e0 0 0 8bdfdd0 stream 0 0 0 8bdfd40 0 0 /var/run/mDNSResponder 8bdfd40 stream 0 0 0 8bdfdd0 0 0 8bdfc20 stream 0 0 0 8bdfcb0 0 0 8bdfcb0 stream 0 0 0 8bdfc20 0 0 8bdfe60 stream 0 0 0 8bdfef0 0 0 8bdfef0 stream 0 0 0 8bdfe60 0 0 8bdff80 stream 0 0 0 8be0010 0 0 /var/tmp/launchd/sock 8be0010 stream 0 0 0 8bdff80 0 0 8be0130 stream 0 0 0 8be00a0 0 0 /var/tmp/launchd/sock 8be00a0 stream 0 0 0 8be0130 0 0 8be0250 stream 0 0 0 8be01c0 0 0 8be01c0 stream 0 0 0 8be0250 0 0 8be0370 stream 0 0 0 8be02e0 0 0 8be02e0 stream 0 0 0 8be0370 0 0 8be0520 stream 0 0 0 8be0400 0 0 8be0400 stream 0 0 0 8be0520 0 0 8be0640 stream 0 0 0 8be0490 0 0 8be0490 stream 0 0 0 8be0640 0 0 8be05b0 stream 0 0 0 8be06d0 0 0 8be06d0 stream 0 0 0 8be05b0 0 0 8be0760 stream 0 0 0 8be07f0 0 0 8be07f0 stream 0 0 0 8be0760 0 0 8be09a0 stream 0 0 8eac2e4 0 0 0 /var/tmp/launchd/sock 8be0a30 stream 0 0 8eac40c 0 0 0 /private/var/run/cupsd 8be0ac0 stream 0 0 8eac5c8 0 0 0 /var/run/usbmuxd 8be0b50 stream 0 0 8eac65c 0 0 0 /var/run/asl_input 8be0c70 stream 0 0 8eac784 0 0 0 /var/run/SCHelper 8be0d00 stream 0 0 8eac818 0 0 0 /var/run/vpncontrol.sock 8be0d90 stream 0 0 8eac8ac 0 0 0 /private/var/run/printtool 8be0e20 stream 0 0 8eac940 0 0 0 /var/run/portmap.socket 8be0f40 stream 0 0 8eac9d4 0 0 0 /var/run/mDNSResponder 8be0eb0 stream 0 0 8eaca68 0 0 0 /var/run/com.apple.ActivityMonitor.socket 96af320 dgram 0 0 0 96ae870 96ae870 0 96ae870 dgram 0 0 0 96af320 96af320 0 96ae510 dgram 0 0 0 96b0520 96b0520 0 96b0520 dgram 0 0 0 96ae510 96ae510 0 96aebd0 dgram 0 0 0 96af290 96af290 0 96af290 dgram 0 0 0 96aebd0 96aebd0 0 96aef30 dgram 0 0 0 a759a30 a759a30 0 a759a30 dgram 0 0 0 96aef30 96aef30 0 96aed80 dgram 0 0 0 96ae3f0 96ae3f0 0 96ae3f0 dgram 0 0 0 96aed80 96aed80 0 96aecf0 dgram 0 0 0 96ae6c0 96ae6c0 0 96ae6c0 dgram 0 0 0 96aecf0 96aecf0 0 96ae630 dgram 0 0 0 8bde3f0 8bde3f0 0 8bde3f0 dgram 0 0 0 96ae630 96ae630 0 96af710 dgram 0 0 0 8bdea20 8bdea20 0 8bdea20 dgram 0 0 0 96af710 96af710 0 96af9e0 dgram 0 0 0 96afb90 96afb90 0 96afb90 dgram 0 0 0 96af9e0 96af9e0 0 96b0f40 dgram 0 0 0 96b0d00 96b0d00 0 96b0d00 dgram 0 0 0 96b0f40 96b0f40 0 8bdf050 dgram 0 0 0 8bdf0e0 8bdf0e0 0 8bdf0e0 dgram 0 0 0 8bdf050 8bdf050 0 8bdfb90 dgram 0 0 0 8bdfb00 8bdfb00 0 8bdfb00 dgram 0 0 0 8bdfb90 8bdfb90 0 8be0be0 dgram 0 0 8eac6f0 0 0 0 /var/run/syslog Thank you all so much for any analysis of this. I am very grateful Ann
How many windows computers do you have behind your router? Its more likely they are soaked with malware. Got kids? Are they seeding torrents/P2P? Spouse streaming a webcam for money? The nice thing about owning a Mac is that when something is wrong, you can almost immediately rule out the Mac as the cause of your issue. Further more, if your isp is telling you they are seeing traffic specifically from your imac, there is something else wrong. They should NOT be able to see passed your router(unless they own it of course), and make determinations about the status of your local LAN.
There's something about the number of DNSResponders that has me thinking it might be another PC in the network (you're being pinged maybe). If it's wireless, is it possible that a neighbor is hijacking your wifi?
Hi - there are no other computers on my network at the moment, I have also disconnected my wifi printer, my nintendo wii and my mobile phone, so the only thing connected to the network at the time the stats were run was my ethernet connected Mac. If I look at my router's DHCP client list, there is just the Mac shown, nothing connecting wirelessly, no trace of anything piggybacking the network. That is what is worrying me. Thanks for all your help. Ann
Disconnect the router from the cable modem. Plug the iMac directly into it and leave it running overnight. Then call the cable company and ask them to check your bandwidth usage for the previous 24 hours.
then turn off wireless altogether for the router and connect it directly to your mac activity monitor will help monitor bandwidth usage in the network section. it logs incoming and outgoing data rates. also i would connect your mac for a night, have the company watch the usage then the next night i would connect a different computer or device and see if it differs from night to night...