Constant bandwidth usage when idle

November 22, 2010 at 01:33:00
Specs: Windows 7, phenom 2 x4 3.2 ghz, 4 gb ddr3
I decided to download and use a bandwidth monitor as I went over my bandwidth limit for a month. I noticed something strange in that I'm getting a constant ~1 Kb/s download that never stops.

I closed all programs and processes that I could and was still getting it. So I downloaded Netlimiter to get a better idea of where the constant download was coming from. It listed the constant download as "unrelated" and info on it says unrelated to any process, but it also says "Incoming connection from "xxx.xxx.xxx.x address with port xx".

I tried blocked the address and port with windows firewall, didn't stop it. I tried clicking the "kill connection" option in Netlimiter program, didn't help.

I tried scanning with Malwarebytes and Ad-aware, nothing came up.

I thought maybe it's because I'm connected through a Hub. I connected directly to the cable box instead, didn't change a thing. Had an idea that maybe it was automatic updates constantly searching for update... turned it off... didn't help.


I'm really at a loss on what it is or what to try.


See More: Constant bandwidth usage when idle

Report •


#1
November 22, 2010 at 05:34:58
If it were me, I'd install wireshark and run it for a few minutes. Then, I'd open some of the related packets and I'd find out what the data is, where it's coming from and what application/process it's related to to figure out it if's something to be concerned about.

For what it's worth, a network interface plugged into a network will regularly send out a "hello I'm here is there anybody out there" packet to ensure network connectivity. I'm not exactly sure of the size and frequency of the packets so can't say for sure if this is what you're experiencing.

It matters not how straight the gate,
How charged with punishments the scroll,
I am the master of my fate;
I am the captain of my soul.

***William Henley***


Report •

#2
November 22, 2010 at 13:13:06
I installed and ran Wireshark. When I ran it, it's constantly being spammed with "Source: Cisco_e7:5b:b7 , Destination: Broadcast , Protocol: ARP"

Perhaps that just means what you said about the network connectivity.


Report •

#3
November 22, 2010 at 13:17:10
Hmmmm.......you've got me there.

I googled all, and parts of that error message hoping to find something to explain what it means. I found bupkiss.

ARP = Address Resolution Protocol

Looking at that, combined with it being a "broadcast" then I would suspect it is the network check packet.

It matters not how straight the gate,
How charged with punishments the scroll,
I am the master of my fate;
I am the captain of my soul.

***William Henley***


Report •

Related Solutions

#4
January 28, 2011 at 06:32:00
I installed and ran Wireshark. When I ran it, it's constantly being spammed with "Source: Cisco_e7:5b:b7 , Destination: Broadcast , Protocol: ARP"

This looks like you have a broadcast storm going on. Some network devices do not support full mesh and will do this. Do you have more than one switch and have them hooked into each other with more than one connection?

https://learningnetwork.cisco.com/m...

http://www.networkuptime.com/archiv...


Report •

#5
January 31, 2011 at 13:18:05
Thx for the reply, no I only have 1 hub that is connected to 2 computers and of course the hub is connected to the cable box.

No switches.


Report •

#6
January 31, 2011 at 15:00:47
A HUB well there's your problem. HUBs suck.

http://www.tomshardware.com/forum/1...

My guess is your Modem is a Modem/Router/Switch device. How many ports are on the back of your modem?

Also, do you have wireless on the modem?

Can you run Wire Shark and see if there are other kinds of packets that seem to be happening just as often as the ARP requests? Also see if you can look at the ARP packets and make sure the MAC for both the destination and source belong to a computer on your network?


Report •

#7
June 6, 2011 at 09:41:31
I also had that "unrelated" in my limiter 3. My laptop is IBM X31 with Windows 2000.
I use avast free to have a quick scan. Nothing is found.
Then I set a boot-time scan in avast free(SCAN COMPUTER>Boot-time Scan). A virus is found and I put it into the chest.
It is peaceful without that "unrelated" now.

Report •


Ask Question