Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

lordmj

macrumors newbie
Original poster
Dec 23, 2016
5
0
Hi everyone!

My home data consumption have went thru the roof for the past 2 months, and I have finally tracked down (using the Traffic Analyser from the Router) the culprit to be the additional iMac which was introduced to my home at about the same time. Its my first Mac OS - which I absolutely loved, minus the excessive data consuming bit. Its literally consuming hundreds of GB per day without me using the internet (for streaming, downloading, etc), mail or being on the iMac!

Did a clean installation when macSierra was launch. Reinstall everything from ground up, instead of upgrading it to the new version.

I have tried the following so far:
  1. Disable iCloud Drive
  2. Disable iCloud Photo Library/My Photo Stream/ iCloud Photo Sharing
  3. Disable Automatically check for update/Background upgrade downloading under System Pref > App Store.
  4. Turned on Firewall
  5. Turned off Spotlight Suggestion & Mail/Message under SpotLight Preferences
  6. Unchecked "automatically download all attachments" options under Mail.
  7. DropBox is under observation and I have switch it to Manual Sync. I have also tried to disable it completely.
  8. Used WPA2 with a complex password setting with Cap, Hypen, Small Letter, Numbers. (I can also verified via my router that I don't have
  9. Ran MalwareBytes & system appear to be clean.
  10. Disable iCloud completely. Same result
  11. Removed my networks in System Preferences/ Network. Then add ethernet and wifi again. Profile user account is new.
  12. Disable OCSP & CRL Service under KeyChain Access Preference
I have found a couple of suggestions pointing the data usage to Mail being the culprit. Its attempt to download every single emails and attachment to store them on the iMac to make them accessible entirely offline and to allow spotlight to index them for easy search. I am hoping turning off Mail under Spotlight Preference will stop this.

Is there a way for us to control the size of email cache? This option was removed in OS X Mavericks. Im currently on Mac Sierra 10.12.2. The only thing I have been able to do for now is to tell Mail not to automatically download my attachment. I fear the consumption will continue until all of my email has been cached. (I have taken the liberty to purge my emails via backend, & controlling the amount of message Mail downloads via server settings on my email server)

Having said that, my current email folder is only using 312MB (via ~/Library on Finder > Go > Mail) So it doesn't explain where does the hundreds of GB went to? So it doesn't

Currently, the only solution is to turn off Wifi on iMac when I am not using it. Would ideally like to fix this problem in a more permanent manner.

Any help or feedback would be much appreciated.

P/S: Data consumption on my Activity Monitor > Network image below is lower than usual today as I have reached my limit for my bandwidth usage and its currently being throttled by my ISP. I left the iMac running over night and it chocked up 4GB, and between then it has gone up to 5.13GB. I am expecting it to be much higher this evening even without being on the iMac. If I topped up my data, it will usually deplete the data very quickly.

Regards,
J


Screen Shot 2016-12-24 at 2.56.56 PM.png
Screen Shot 2016-12-24 at 3.23.45 PM.png
Screen Shot 2016-12-24 at 11.26.02 AM.png
 
Last edited:

iMacDragon

macrumors 68020
Oct 18, 2008
2,394
724
UK
Check activity monitor all processes to start, as nothing seems to be showing any kind of major usage in your processes.

does sound very odd though.
 

lordmj

macrumors newbie
Original poster
Dec 23, 2016
5
0
Yes. I have limited data limit with the ISP. Broadband is kinda pricey over this end (kinda also why I changed my password every now and then have complex crazy ones to ensure I don't have leechers)

Do you have a data limit with your ISP?
[doublepost=1482631746][/doublepost]I know right? I just came seem to find out what's taking up all the data. Activity monitor is telling me that is consuming so much data, well receiving... but the maths doesn't add up.


Check activity monitor all processes to start, as nothing seems to be showing any kind of major usage in your processes.

does sound very odd though.
 

Zazoh

macrumors 68000
Jan 4, 2009
1,513
1,120
San Antonio, Texas
Is iTunes syncing? Sounds like it is downloading or uploading iTunes music. I don't think it is your mail. Mail usually syncs fairly quickly.
 

Fishrrman

macrumors Penryn
Feb 20, 2009
28,983
13,036
Have you tried turning DropBox all the way off? Deleting it, if necessary?
Have you tried completely signing out from iCloud? In effect, disabling it?
 

bcave098

macrumors 6502a
Sep 6, 2015
516
207
Northern British Columbia
I know right? I just came seem to find out what's taking up all the data. Activity monitor is telling me that is consuming so much data, well receiving... but the maths doesn't add up.
I think he means to have Activity Monitor show "All Processes" instead of the ones run by your user account. Use View > All Processes in Activity Monitor.
 

allan.nyholm

macrumors 68020
Nov 22, 2007
2,310
2,564
Aalborg, Denmark
could you try removing your networks in System Preferences/ Network. Then add ethernet and wifi again. Or create a new profile in addition to it all
 
Last edited:

dsemf

macrumors 6502
Jul 26, 2014
435
110
I would try running EtraCheck. There may be some unusual add-ons or malware that is generating the excess data activity.

If you do so, post the output in a code block and we can review it.

You may also want to download and run MalwareBytes just to be sure.


DS
 

lordmj

macrumors newbie
Original poster
Dec 23, 2016
5
0
Yes I have tried that. Same result.

Have you tried turning DropBox all the way off? Deleting it, if necessary?
Have you tried completely signing out from iCloud? In effect, disabling it?
[doublepost=1482719882][/doublepost]That make perfect sense now.
I have adjusted it now to ALL PROCESSES. Ha ha ha ha.
Thank you.

I think he means to have Activity Monitor show "All Processes" instead of the ones run by your user account. Use View > All Processes in Activity Monitor.
[doublepost=1482719927][/doublepost]Thank you for the suggestion. I will give that a go

could you try removing your networks in System Preferences/ Network. Then add ethernet and wifi again. Or create a new profile in addition to it all
[doublepost=1482720200][/doublepost]Thank you for the suggestion.
I will run EtraCheck and post the output here shortly.
A copy of the MalwareBytes was downloaded 2 days ago - someone was saying there is no need to install a virus scanner for macOS, but a MalwareBytes will suffice. I have Sophos Anti Virus installed, but will give MalwareBytes a go to see if there is any Malware detected.

UPDATE:
MalwareBytes just complete the scanning. Everything is clean.
I have recently did a clean installation for MacSierra. Reformatted the HD and reinstalled everything from ground up instead of upgrading.

EtraCheck report is out. Just posted a copy of the result below. TQ

I would try running EtraCheck. There may be some unusual add-ons or malware that is generating the excess data activity.

If you do so, post the output in a code block and we can review it.

You may also want to download and run MalwareBytes just to be sure.


DS
[doublepost=1482720928][/doublepost]EtreCheck version: 3.1.5 (343)

Report generated 2016-12-26 10:51:40

Download EtreCheck from https://etrecheck.com

Runtime 3:36

Performance: Good



Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.

Click the [Remove] links to remove adware.



Problem: Other problem

Description:

macOS is consuming a lot of data even when I am not using the system.



Hardware Information:

iMac (27-inch, Mid 2011)

[Technical Specifications] - [User Guide] - [Warranty & Service]

iMac - model: iMac12,2

1 3.1 GHz Intel Core i5 (i5-2400) CPU: 4-core

16 GB RAM Upgradeable - [Instructions]

BANK 0/DIMM0

Empty

BANK 1/DIMM0

Empty

BANK 0/DIMM1

8 GB DDR3 1333 MHz ok

BANK 1/DIMM1

8 GB DDR3 1333 MHz ok

Bluetooth: Old - Handoff/Airdrop2 not supported

Wireless: en1: 802.11 a/b/g/n


Video Information:

AMD Radeon HD 6970M - VRAM: 1024 MB

iMac 2560 x 1440


System Software:

macOS Sierra 10.12.2 (16C67) - Time since boot: about one day


Disk Information:

WDC WD1001FALS-403AA0 disk0 : (1 TB) (Rotational)

[Show SMART report]

EFI (disk0s1) <not mounted> : 210 MB

Macintosh HD (disk0s2) / [Startup]: 999.35 GB (881.44 GB free)

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB


HL-DT-STDVDRW GA32N ()


USB Information:

Apple Computer, Inc. IR Receiver

Apple Card Reader

Apple Inc. FaceTime HD Camera (Built-in)

Hewlett-Packard HP Color LaserJet MFP M277dw

Apple Inc. BRCM2046 Hub

Apple Inc. Bluetooth USB Host Controller


Thunderbolt Information:

Apple Inc. thunderbolt_bus


Configuration files:

System Integrity Protection status: disabled


Gatekeeper:

Mac App Store and identified developers


Adware:

~/Library/LaunchAgents/com.bittorrent.BitTorrent.plist

One adware file found. [Remove]


Kernel Extensions:

/Library/Extensions

[loaded] at.obdev.nke.LittleSnitch (3.7.1 - SDK 10.11 - 2016-12-25) [Support]

[loaded] com.sophos.kext.oas (9.5.54 - SDK 10.11 - 2016-12-25) [Support]

[loaded] com.sophos.nke.swi (9.5.52 - SDK 10.11 - 2016-12-25) [Support]



System Launch Agents:

[not loaded] 8 Apple tasks

[loaded] 175 Apple tasks

[running] 97 Apple tasks


System Launch Daemons:

[not loaded] 42 Apple tasks

[loaded] 167 Apple tasks

[running] 101 Apple tasks


Launch Agents:

[running] at.obdev.LittleSnitchUIAgent.plist (2016-12-25) [Support]

[not loaded] com.adobe.AAM.Updater-1.0.plist (2016-11-19) [Support]

[running] com.sophos.uiserver.plist (2016-11-20) [Support]


Launch Daemons:

[running] at.obdev.littlesnitchd.plist (2016-12-25) [Support]

[loaded] com.adobe.SwitchBoard.plist (2016-11-19) [Support]

[running] com.malwarebytes.HelperTool.plist (2016-12-26) [Support]

[loaded] com.microsoft.office.licensingV2.helper.plist (2015-08-15) [Support]

[running] com.sophos.common.servicemanager.plist (2016-11-19) [Support]


User Launch Agents:

[loaded] com.bittorrent.BitTorrent.plist (2016-12-10) Adware! [Remove]

/usr/bin/open

[loaded] com.google.keystone.agent.plist (2016-11-19) [Support]


User Login Items:

Magnet Application

(/Applications/Magnet.app)

iTunesHelper Application (2016-12-23)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Dropbox Application

(/Applications/Dropbox.app)

BitTorrent Application

(/Applications/BitTorrent.app)

com.adobe.SwitchBoard.monitor.plist MachInit

(/etc/mach_init_per_user.d/com.adobe.SwitchBoard.monitor.plist)

Mach Init items are deprecated


Internet Plug-ins:

JavaAppletPlugin: 15.0.1 - SDK 10.7 (2016-11-19) Check version

AdobePDFViewer: 10.1.1 (2016-11-19) [Support]

QuickTime Plugin: 7.7.3 (2016-12-23)



3rd Party Preference Panes:

None


Time Machine:

Time Machine not configured!



Top Processes by CPU:

24% syncdefaultsd

8% SophosScanD

8% kernel_task

6% mdworker(10)

6% WindowServer


Top Processes by Memory:

1.65 GB com.apple.WebKit.WebContent(7)

970 MB kernel_task

410 MB mdworker(10)

262 MB SophosScanD

213 MB Dropbox


Virtual Memory Information:

10.39 GB Available RAM

5.96 GB Free RAM

5.61 GB Used RAM

4.44 GB Cached files

0 B Swap Used


Diagnostics Information:

Dec 25, 2016, 01:39:13 PM Self test - passed

Dec 25, 2016, 10:25:37 AM /Library/Logs/DiagnosticReports/Little Snitch Daemon_2016-12-25-102537_[redacted].crash

/Library/Little Snitch/Little Snitch Daemon.bundle/Contents/MacOS/Little Snitch Daemon

Dec 23, 2016, 06:57:46 PM /Library/Logs/DiagnosticReports/mtmd_2016-12-23-185746_[redacted].crash

/System/Library/CoreServices/backupd.bundle/Contents/Resources/mtmd

Dec 23, 2016, 06:57:38 PM /Library/Logs/DiagnosticReports/mtmd_2016-12-23-185738_[redacted].crash

Dec 23, 2016, 06:57:32 PM /Library/Logs/DiagnosticReports/ReportCrash_2016-12-23-185732_[redacted].crash

/System/Library/CoreServices/ReportCrash
 
Last edited:
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.