I've done all. the. things. with iCloud and Spotlight, etc., that are the standard fixes for nsurlsessionid sucking bandwidth. It's still starting up and pulling down as much data as is available on my 30mbit down broadband. My ISP has contacted us and told us that if I don't get this fixed that they'll cancel our service and do nasty legal things to us because we're violating their TOS six ways til Sunday.
The first time we discovered this problem, several months ago, this process had downloaded almost 1.5 TB of data--while I only have a 1TB drive. {head scratcher} We thought we had it fixed, but the ISP just emailed us again.
So.
My machine is mostly not connected to the wifi right now--which is a problem, because I need to work, and all of my work is dependent on being online. Yay. I've been looking at the open files and ports in the nsurlsessionid process, and here's what we've got:
That destination ip address is owned by Apple, as any google search will confirm. Sooooo . . . without being a complete Apple uber-expert, I'm stuck wondering what on earth is doing this. I've turned off iCloud drive, I don't store my photos in iCloud, and I'm at a complete loss.
When I first began looking at this info, quoted above, there was mention of adobeAIR (which I no longer use), so I uninstalled it. It disappeared from the list when nsurlsessionid started up after force quitting it, but still no change . . . at this point I don't know what questions to even ask. I'm reasonably tech savvy, but am not a coder by any means.
Thanks, everyone . . .
The first time we discovered this problem, several months ago, this process had downloaded almost 1.5 TB of data--while I only have a 1TB drive. {head scratcher} We thought we had it fixed, but the ISP just emailed us again.
So.
My machine is mostly not connected to the wifi right now--which is a problem, because I need to work, and all of my work is dependent on being online. Yay. I've been looking at the open files and ports in the nsurlsessionid process, and here's what we've got:
/
/usr/libexec/nsurlsessiond
/private/var/db/mds/messages/se_SecurityMessages
/private/var/db/mds/system/mdsDirectory.db
/Library/Keychains/FileVaultMaster.keychain
/usr/share/icu/icudt55l.dat
/private/var/folders/hr/pc_xs99x11scs496bq0z8prw0000gn/0/com.apple.LaunchServices-134501.csstore
/Users/{my username}/Library/Keychains/login.keychain
/Library/Keychains/System.keychain
/System/Library/Keychains/SystemRootCertificates.keychain
/usr/lib/dyld
/private/var/db/dyld/dyld_shared_cache_x86_64
/dev/null
/dev/null
/dev/null
count=2, state=0x12
/dev/random
192.168.100.111:50454->17.248.130.232:https
192.168.100.111:50451->17.248.130.232:https
192.168.100.111:50452->17.248.130.232:https
192.168.100.111:50453->17.248.130.232:https
192.168.100.111:50450->17.248.130.232:https
192.168.100.111:50469->17.248.130.232:https
192.168.100.111:50469->17.248.130.232:https
->0x980ca6bec370a149
192.168.100.111:50450->17.248.130.232:https
192.168.100.111:50451->17.248.130.232:https
192.168.100.111:50452->17.248.130.232:https
192.168.100.111:50453->17.248.130.232:https
192.168.100.111:50454->17.248.130.232:https
->0x980ca6bec3708dc1
/usr/libexec/nsurlsessiond
/private/var/db/mds/messages/se_SecurityMessages
/private/var/db/mds/system/mdsDirectory.db
/Library/Keychains/FileVaultMaster.keychain
/usr/share/icu/icudt55l.dat
/private/var/folders/hr/pc_xs99x11scs496bq0z8prw0000gn/0/com.apple.LaunchServices-134501.csstore
/Users/{my username}/Library/Keychains/login.keychain
/Library/Keychains/System.keychain
/System/Library/Keychains/SystemRootCertificates.keychain
/usr/lib/dyld
/private/var/db/dyld/dyld_shared_cache_x86_64
/dev/null
/dev/null
/dev/null
count=2, state=0x12
/dev/random
192.168.100.111:50454->17.248.130.232:https
192.168.100.111:50451->17.248.130.232:https
192.168.100.111:50452->17.248.130.232:https
192.168.100.111:50453->17.248.130.232:https
192.168.100.111:50450->17.248.130.232:https
192.168.100.111:50469->17.248.130.232:https
192.168.100.111:50469->17.248.130.232:https
->0x980ca6bec370a149
192.168.100.111:50450->17.248.130.232:https
192.168.100.111:50451->17.248.130.232:https
192.168.100.111:50452->17.248.130.232:https
192.168.100.111:50453->17.248.130.232:https
192.168.100.111:50454->17.248.130.232:https
->0x980ca6bec3708dc1
That destination ip address is owned by Apple, as any google search will confirm. Sooooo . . . without being a complete Apple uber-expert, I'm stuck wondering what on earth is doing this. I've turned off iCloud drive, I don't store my photos in iCloud, and I'm at a complete loss.
When I first began looking at this info, quoted above, there was mention of adobeAIR (which I no longer use), so I uninstalled it. It disappeared from the list when nsurlsessionid started up after force quitting it, but still no change . . . at this point I don't know what questions to even ask. I'm reasonably tech savvy, but am not a coder by any means.
Thanks, everyone . . .