Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Network/ISP problem

A

annc

macrumors newbie
Original poster
Oct 12, 2009
7
0
Hi - I have a problem with my isp. They are saying that my very very poor speeds are due to the fact that a tremendous amount of upload activity is coming from my imac. I am running osx version 10.6.7. I have checked my router stats which show nothing unusual, i have just run Terminal netstat -n and have five printout pages of info which might as well be double dutch. Would anyone be willing to see if there is anything unusual in my network activity if I post the stats here.

Thanks so much

Ann:D
 
Posting your router status and the output of netstat won't help anyone, as they aren't applicable tools for your problem. If I had to guess what the culprit was I'd say you're probably using a Bittorrent client with an uncapped upload rate or amount.
 
Thanks for that. I just need some advice regarding netstat results - they mean nothing to me and I need to refute (or not) that the reason for my very low internet speeds is because of the amount of upload data from my Mac. I only send a couple of e-mails a day and upload nothing else. I am worried that my Mac has malware etc. As I said, I closed all aps and ran netstat -n and had 5 pages of active internet connections, just need some help deciphering. If no one here can help, could you recommend a forum that could ? :D
 
I'll be happy to take a look. If you'd rather PM them that's fine too. Also download widget istat pro. It's free and will tell what your current bandwidth usage is- good way to see if idle upload is occurring.
 
Hi - I have istat pro and from that it seems nothing much is going on. It is the following that makes me nervous:
I need to post in two lots as there are to many characters.
tcp4 66 0
udp6 0 0 ::1.4500 *.*
udp6 0 0 ::1.500 *.*
udp6 0 0 fe80::1%lo0.4500 *.*
udp6 0 0 fe80::1%lo0.500 *.*
udp4 0 0
udp6 0 0 fd8d:e69e:480e:5.4500 *.*
udp6 0 0 fd8d:e69e:480e:5.500 *.*
udp6 0 0 fe80::223:dfff:f.4500 *.*
udp6 0 0 fe80::223:dfff:f.500 *.*
*.*
udp6 0 0 *.51954 *.*
udp4 0 0 *.51954 *.*
udp6 0 0 *.64303 *.*
udp4 0 0 *.64303 *.*
udp6 0 0 *.53277 *.*
udp4 0 0 *.53277 *.*
udp6 0 0 *.49753 *.*
udp4 0 0 *.49753 *.*
udp6 0 0 *.64439 *.*
udp4 0 0 *.64439 *.*
udp6 0 0 *.60930 *.*
udp4 0 0 *.60930 *.*
udp6 0 0 *.60186 *.*
udp4 0 0 *.60186 *.*
udp6 0 0 *.50301 *.*
udp4 0 0 *.50301 *.*
udp6 0 0 *.55522 *.*
udp4 0 0 *.55522 *.*
udp6 0 0 *.54363 *.*
udp4 0 0 *.54363 *.*
udp6 0 0 *.63755 *.*
udp4 0 0 *.63755 *.*
udp6 0 0 *.51930 *.*
udp4 0 0 *.51930 *.*
udp46 0 0 *.* *.*
udp4 0 0 *.*
udp6 0 0 fe80::223:dfff:f.123 *.*
udp46 0 0 *.* *.*
udp46 0 0 *.* *.*
udp46 0 0 *.* *.*
udp46 0 0 *.* *.*
udp46 0 0 *.* *.*
udp46 0 0 *.* *.*
udp4 0 0 *.* *.*
udp4 0 0 *.* *.*
udp6 0 0 *.*
udp4 0 0 *.*
udp6 0 0 fe80::1%lo0.123 *.*
udp6 0 0 ::1.123 *.*
udp6 0 0 *.123 *.*
udp4 0 0 *.123 *.*
udp46 0 0 *.* *.*
udp4 42000 0 *.631 *.*
udp4 0 0 *.138 *.*
udp4 0 0 *.137 *.*
udp4 0 0 *.* *.*
udp4 0 0 *.* *.*
udp6 0 0 *.5353 *.*
udp4 0 0 *.5353 *.*
udp4 0 0 *.* *.*
icm6 0 0 *.* *.*
 
Last edited:
Second lot:
Active LOCAL (UNIX) domain sockets
Address Type Recv-Q Send-Q Inode Conn Refs Nextref Addr
96b0a30 stream 0 0 0 8bde510 0 0 /tmp/launchd-91.7jSaMB/sock
8bde510 stream 0 0 0 96b0a30 0 0
8bdf170 stream 0 0 0 8bdf320 0 0
8bdf320 stream 0 0 0 8bdf170 0 0
96ae990 stream 0 0 0 a759ac0 0 0 /var/tmp/launchd/sock
a759ac0 stream 0 0 0 96ae990 0 0
8bdf7a0 stream 0 0 0 96b05b0 0 0
96b05b0 stream 0 0 0 8bdf7a0 0 0
a759d00 stream 0 0 0 a759be0 0 0 /var/run/mDNSResponder
a759be0 stream 0 0 0 a759d00 0 0
96b0130 stream 0 0 0 96ae5a0 0 0 /var/run/mDNSResponder
96ae5a0 stream 0 0 0 96b0130 0 0
96ae090 stream 0 0 0 96ae240 0 0 /var/run/pppconfd
96ae240 stream 0 0 0 96ae090 0 0
96ae1b0 stream 0 0 0 96ae360 0 0 /var/run/mDNSResponder
96ae360 stream 0 0 0 96ae1b0 0 0
96ae900 stream 0 0 a77b128 0 0 0 /tmp/ics133
a7599a0 stream 0 0 a7604d0 0 0 0 /tmp/icssuis501
96aeb40 stream 0 0 0 96aec60 0 0 /var/run/mDNSResponder
96aec60 stream 0 0 0 96aeb40 0 0
8bde480 stream 0 0 0 96af050 0 0 /var/run/usbmuxd
96af050 stream 0 0 0 8bde480 0 0
96af170 stream 0 0 0 96af200 0 0
96af200 stream 0 0 0 96af170 0 0
96af560 stream 0 0 0 96af4d0 0 0 /var/run/mDNSResponder
96af4d0 stream 0 0 0 96af560 0 0
96af5f0 stream 0 0 0 96af680 0 0 /var/run/mDNSResponder
96af680 stream 0 0 0 96af5f0 0 0
96af830 stream 0 0 0 8bdef30 0 0 /var/run/mDNSResponder
8bdef30 stream 0 0 0 96af830 0 0
96af7a0 stream 0 0 0 8bdefc0 0 0 /var/run/mDNSResponder
8bdefc0 stream 0 0 0 96af7a0 0 0
8bde5a0 stream 0 0 0 8bded80 0 0
8bded80 stream 0 0 0 8bde5a0 0 0
8bdecf0 stream 0 0 0 8bdec60 0 0
8bdec60 stream 0 0 0 8bdecf0 0 0
8bde6c0 stream 0 0 0 8bde360 0 0
8bde360 stream 0 0 0 8bde6c0 0 0
8bde000 stream 0 0 a0191ec 0 0 0 /tmp/launch-mWGAu7/org.x:0
8bde1b0 stream 0 0 a019314 0 0 0 /tmp/launch-SGWUiW/Listeners
96b07f0 stream 0 0 a01943c 0 0 0 /tmp/launch-p0yvJ9/Render
8bde630 stream 0 0 a019a98 0 0 0 /tmp/launchd-91.7jSaMB/sock
96b0eb0 stream 0 0 9fceb2c 0 0 0 /var/run/racoon.sock
96b0c70 stream 0 0 0 96b06d0 0 0 /var/tmp/launchd/sock
96b06d0 stream 0 0 0 96b0c70 0 0
96b0d90 stream 0 0 0 8bde240 0 0
8bde240 stream 0 0 0 96b0d90 0 0
96b0e20 stream 0 0 0 8bdf680 0 0
8bdf680 stream 0 0 0 96b0e20 0 0
96b0640 stream 0 0 0 96b0490 0 0 /var/run/mDNSResponder
96b0490 stream 0 0 0 96b0640 0 0
8bde2d0 stream 0 0 0 96b0be0 0 0
96b0be0 stream 0 0 0 8bde2d0 0 0
96b0250 stream 0 0 0 96b0010 0 0 /var/run/mDNSResponder
96b0010 stream 0 0 0 96b0250 0 0
96afdd0 stream 0 0 0 96afcb0 0 0 /var/tmp/launchd/sock
96afcb0 stream 0 0 0 96afdd0 0 0
96afd40 stream 0 0 0 96afa70 0 0 /var/run/mDNSResponder
96afa70 stream 0 0 0 96afd40 0 0
96b01c0 stream 0 0 0 96afb00 0 0 /var/run/mDNSResponder
96afb00 stream 0 0 0 96b01c0 0 0
96afef0 stream 0 0 0 96af8c0 0 0
96af8c0 stream 0 0 0 96afef0 0 0
96afe60 stream 0 0 0 8bde990 0 0
8bde990 stream 0 0 0 96afe60 0 0
96afc20 stream 0 0 0 96b0760 0 0
96b0760 stream 0 0 0 96afc20 0 0
96b09a0 stream 0 0 0 8bdebd0 0 0 /var/run/mDNSResponder
8bdebd0 stream 0 0 0 96b09a0 0 0
96b0880 stream 0 0 0 96b0910 0 0
96b0910 stream 0 0 0 96b0880 0 0
96b0ac0 stream 0 0 0 96b0b50 0 0
96b0b50 stream 0 0 0 96b0ac0 0 0
8bde090 stream 0 0 0 8bde120 0 0
8bde120 stream 0 0 0 8bde090 0 0
8bde870 stream 0 0 0 8bde900 0 0
8bde900 stream 0 0 0 8bde870 0 0
8bdee10 stream 0 0 0 8bdeea0 0 0
8bdeea0 stream 0 0 0 8bdee10 0 0
8bdf200 stream 0 0 0 0 0 0
8bdf560 stream 0 0 0 8bdf5f0 0 0
8bdf5f0 stream 0 0 0 8bdf560 0 0
8bdf710 stream 0 0 0 8bdf8c0 0 0
8bdf8c0 stream 0 0 0 8bdf710 0 0
8bdf950 stream 0 0 915fafc 0 0 0 /var/run/pppconfd
8bdf9e0 stream 0 0 0 8bdfa70 0 0
8bdfa70 stream 0 0 0 8bdf9e0 0 0
8bdfdd0 stream 0 0 0 8bdfd40 0 0 /var/run/mDNSResponder
8bdfd40 stream 0 0 0 8bdfdd0 0 0
8bdfc20 stream 0 0 0 8bdfcb0 0 0
8bdfcb0 stream 0 0 0 8bdfc20 0 0
8bdfe60 stream 0 0 0 8bdfef0 0 0
8bdfef0 stream 0 0 0 8bdfe60 0 0
8bdff80 stream 0 0 0 8be0010 0 0 /var/tmp/launchd/sock
8be0010 stream 0 0 0 8bdff80 0 0
8be0130 stream 0 0 0 8be00a0 0 0 /var/tmp/launchd/sock
8be00a0 stream 0 0 0 8be0130 0 0
8be0250 stream 0 0 0 8be01c0 0 0
8be01c0 stream 0 0 0 8be0250 0 0
8be0370 stream 0 0 0 8be02e0 0 0
8be02e0 stream 0 0 0 8be0370 0 0
8be0520 stream 0 0 0 8be0400 0 0
8be0400 stream 0 0 0 8be0520 0 0
8be0640 stream 0 0 0 8be0490 0 0
8be0490 stream 0 0 0 8be0640 0 0
8be05b0 stream 0 0 0 8be06d0 0 0
8be06d0 stream 0 0 0 8be05b0 0 0
8be0760 stream 0 0 0 8be07f0 0 0
8be07f0 stream 0 0 0 8be0760 0 0
8be09a0 stream 0 0 8eac2e4 0 0 0 /var/tmp/launchd/sock
8be0a30 stream 0 0 8eac40c 0 0 0 /private/var/run/cupsd
8be0ac0 stream 0 0 8eac5c8 0 0 0 /var/run/usbmuxd
8be0b50 stream 0 0 8eac65c 0 0 0 /var/run/asl_input
8be0c70 stream 0 0 8eac784 0 0 0 /var/run/SCHelper
8be0d00 stream 0 0 8eac818 0 0 0 /var/run/vpncontrol.sock
8be0d90 stream 0 0 8eac8ac 0 0 0 /private/var/run/printtool
8be0e20 stream 0 0 8eac940 0 0 0 /var/run/portmap.socket
8be0f40 stream 0 0 8eac9d4 0 0 0 /var/run/mDNSResponder
8be0eb0 stream 0 0 8eaca68 0 0 0 /var/run/com.apple.ActivityMonitor.socket
96af320 dgram 0 0 0 96ae870 96ae870 0
96ae870 dgram 0 0 0 96af320 96af320 0
96ae510 dgram 0 0 0 96b0520 96b0520 0
96b0520 dgram 0 0 0 96ae510 96ae510 0
96aebd0 dgram 0 0 0 96af290 96af290 0
96af290 dgram 0 0 0 96aebd0 96aebd0 0
96aef30 dgram 0 0 0 a759a30 a759a30 0
a759a30 dgram 0 0 0 96aef30 96aef30 0
96aed80 dgram 0 0 0 96ae3f0 96ae3f0 0
96ae3f0 dgram 0 0 0 96aed80 96aed80 0
96aecf0 dgram 0 0 0 96ae6c0 96ae6c0 0
96ae6c0 dgram 0 0 0 96aecf0 96aecf0 0
96ae630 dgram 0 0 0 8bde3f0 8bde3f0 0
8bde3f0 dgram 0 0 0 96ae630 96ae630 0
96af710 dgram 0 0 0 8bdea20 8bdea20 0
8bdea20 dgram 0 0 0 96af710 96af710 0
96af9e0 dgram 0 0 0 96afb90 96afb90 0
96afb90 dgram 0 0 0 96af9e0 96af9e0 0
96b0f40 dgram 0 0 0 96b0d00 96b0d00 0
96b0d00 dgram 0 0 0 96b0f40 96b0f40 0
8bdf050 dgram 0 0 0 8bdf0e0 8bdf0e0 0
8bdf0e0 dgram 0 0 0 8bdf050 8bdf050 0
8bdfb90 dgram 0 0 0 8bdfb00 8bdfb00 0
8bdfb00 dgram 0 0 0 8bdfb90 8bdfb90 0
8be0be0 dgram 0 0 8eac6f0 0 0 0 /var/run/syslog
Thank you all so much for any analysis of this. I am very grateful

Ann
 
annc said:
Thanks for that. I just need some advice regarding netstat results - they mean nothing to me and I need to refute (or not) that the reason for my very low internet speeds is because of the amount of upload data from my Mac. I only send a couple of e-mails a day and upload nothing else. I am worried that my Mac has malware etc. As I said, I closed all aps and ran netstat -n and had 5 pages of active internet connections, just need some help deciphering. If no one here can help, could you recommend a forum that could ? :D
Click to expand...

How many windows computers do you have behind your router? Its more likely they are soaked with malware. Got kids? Are they seeding torrents/P2P? Spouse streaming a webcam for money?

The nice thing about owning a Mac is that when something is wrong, you can almost immediately rule out the Mac as the cause of your issue.

Further more, if your isp is telling you they are seeing traffic specifically from your imac, there is something else wrong. They should NOT be able to see passed your router(unless they own it of course), and make determinations about the status of your local LAN.
 
lythium said:
How many windows computers do you have behind your router? Its more likely they are soaked with malware. Got kids? Are they seeding torrents/P2P? Spouse streaming a webcam for money? lol :D

The nice thing about owning a Mac is that when something is wrong, you can almost immediately rule out the Mac as the cause of your issue.

Further more, if your isp is telling you they are seeing traffic specifically from your imac, there is something else wrong. They should NOT be able to see passed your router(unless they own it of course), and make determinations about the status of your local LAN.
Click to expand...

There's something about the number of DNSResponders that has me thinking it might be another PC in the network (you're being pinged maybe). If it's wireless, is it possible that a neighbor is hijacking your wifi?
 
Hi - there are no other computers on my network at the moment, I have also disconnected my wifi printer, my nintendo wii and my mobile phone, so the only thing connected to the network at the time the stats were run was my ethernet connected Mac. If I look at my router's DHCP client list, there is just the Mac shown, nothing connecting wirelessly, no trace of anything piggybacking the network. That is what is worrying me.

Thanks for all your help.

Ann
 
annc said:
Hi - there are no other computers on my network at the moment, I have also disconnected my wifi printer, my nintendo wii and my mobile phone, so the only thing connected to the network at the time the stats were run was my ethernet connected Mac. If I look at my router's DHCP client list, there is just the Mac shown, nothing connecting wirelessly, no trace of anything piggybacking the network. That is what is worrying me.

Thanks for all your help.

Ann
Click to expand...

Disconnect the router from the cable modem. Plug the iMac directly into it and leave it running overnight. Then call the cable company and ask them to check your bandwidth usage for the previous 24 hours.
 
Sorry - can't do that - I have a combined modem router, all one and the same.
 
then turn off wireless altogether for the router and connect it directly to your mac

activity monitor will help monitor bandwidth usage in the network section. it logs incoming and outgoing data rates.



also i would connect your mac for a night, have the company watch the usage
then the next night i would connect a different computer or device and see if it differs from night to night...
 
Last edited:
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back