If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Rate Thread | Display Modes |
#1
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
This has been going on for several weeks: download speed on my mail client
and everything else I try is terrible - as in glacially slow. Then I reboot the PC - just the PC, nothing else - and speeds return to normal. The weird part is that SpeedTest.net's numbers are about the same both before and after. So it's got to be something going South in my OS, right? But what? -- Pete Cresswell |
Ads |
#2
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
PeteCresswell wrote:
This has been going on for several weeks: download speed on my mail client and everything else I try is terrible - as in glacially slow. Then I reboot the PC - just the PC, nothing else - and speeds return to normal. The weird part is that SpeedTest.net's numbers are about the same both before and after. So it's got to be something going South in my OS, right? But what? Disable your anti-virus and retest. Many AVs include e-mail interrogation which generates delays to inspect the e-mail traffic. In fact, if their transparent proxy becomes unresponsive, e-mail traffic goes dead. E-mail interrogation is superfluous. The added delay for interrogation can cause timeouts by the client (waiting for traffic from the server since it is first told of the new message, asks to retrieve it, but then has to wait longer) or by the server (client tells server about a new message, the server readies, but has to wait longer). It affords no more protection or malware detection coverage than does the on-access (real-time) scanner. In fact, the same scanner is used for on-access protection and to interrogate e-mail traffic. Attachments are not floating separate of an e-mail. They are long encoded *text* strings in MIME sections within the body of the e-mail. As text strings, they pose no threat to your computer. Only when they are extracted from the e-mail to put into a file, and if a correct filetype (e.g., .exe), may the malware then be in an executable form to cause harm. On extraction, a new file gets created which triggers the AV's on-access scanner to check the newly created file. E-mail scanning is superfluous. It is used to bloat the feature set. Marketing loves this kind of bloat. Disable e-mail scanning in the AV program or uninstall that module in the AV product. Since the AV's e-mail scan module is not interrogating the Speedtest traffic (it isn't e-mail traffic), there is no impact by the AV on Speedtest's transfer to measure network speed. You never mentioned WHAT e-mail client you use. Could be a setting has changed which affects transfer speed of messages. For example, an AV might install an add-on or the e-mail can be configured to pass newly retrieved messages to an AV program that then has to interrogate that e-mail traffic and inspect its content to suspicious content - something the AV's on-access scanner already does *if* and when the user decides to extract an attachment from an e-mail. If disabling e-mail scanning in the AV program doesn't help, see if [temporarily] disabling the entire AV program helps. If that doesn't work then use msconfig.exe or SysInternals' AutoRuns to disable all startup programs, reboot Windows, and test again to see if a startup program is interfering with e-mail traffic. |
#3
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
In message , VanguardLH
writes: PeteCresswell wrote: This has been going on for several weeks: download speed on my mail client and everything else I try is terrible - as in glacially slow. Then I reboot the PC - just the PC, nothing else - and speeds return to normal. The weird part is that SpeedTest.net's numbers are about the same both before and after. So it's got to be something going South in my OS, right? But what? Disable your anti-virus and retest. Many AVs include e-mail interrogation which generates delays to inspect [long rant about email AV scanning deleted] startup programs, reboot Windows, and test again to see if a startup program is interfering with e-mail traffic. I think you saw Pete's mention of email, and this triggered your red mist ... Though I tend to agree with you that AV scanning of emails is largely unnecessary, you missed his words "and everything else" - and, you haven't explained how, if that _were_ the cause, a reboot would make it return to normal for a while. Not, I'm afraid, that I have a solution to the problem - I just don't think that AV scanning of emails is the cause. I have BitMeter2 (http://codebox.org.uk/pages/bitmeter2), with the audio turned on, and set to 100 kB (which IIRR is the default). I find this a useful way of monitoring what's going on - it won't solve any problems, of course, but I find it useful as a monitor (that I don't have to watch). [I'm sure other similar utilities are available.] -- J. P. Gilliver. UMRA: 1960/1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf If you want to make people angry, lie to them. If you want to make them absolutely livid, then tell 'em the truth. |
#4
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
(PeteCresswell) wrote:
This has been going on for several weeks: download speed on my mail client and everything else I try is terrible - as in glacially slow. Then I reboot the PC - just the PC, nothing else - and speeds return to normal. The weird part is that SpeedTest.net's numbers are about the same both before and after. So it's got to be something going South in my OS, right? But what? Something to do with your router ? ******* https://support.speedtest.net/hc/en-...lt-calculated- "The client establishes multiple connections with the server over port: 8080 " So then, there are several things special about speedtest.net 1) Probably doesn't go looking for a web proxy ? Is the usage of web proxy servers port number sensitive ? 2) Uses port 8080 on outgoing connection to Speedtest server. 3) Uses Adobe Flash for the interface. 4) Uses a web browser to conduct the test. ******* You could also try some tests with: 1) A second computer. 2) Your current computer, only running a Linux LiveCD (to see if a different network stack helps). Paul |
#5
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
J. P. Gilliver (John) wrote:
VanguardLH *WROTE*: PeteCresswell wrote: This has been going on for several weeks: download speed on my mail client and everything else I try is terrible - as in glacially slow. Then I reboot the PC - just the PC, nothing else - and speeds return to normal. The weird part is that SpeedTest.net's numbers are about the same both before and after. So it's got to be something going South in my OS, right? But what? Disable your anti-virus and retest. I think you saw Pete's mention of email, and this triggered your red mist ... Yep, it was the ONLY network traffic that Pete reported as being glacially slow. "Everything else" gives almost nothing to work on. Though I tend to agree with you that AV scanning of emails is largely unnecessary, you missed his words "and everything else" - and, you haven't explained how, if that _were_ the cause, a reboot would make it return to normal for a while. Disable the anti-virus and retest. E-mail interrogation is just one function in many AVs. "Everything else" isn't specific. AVs also interrogate HTTP traffic. Some can even interrogate HTTPS traffic if you let them install their root cert in your local cert store or in the web browser's cert store (in the case of Firefox which uses its own private cert store instead of the global one handled by the OS). If the other protocols use standard port numbers then many AVs can also interrogate traffic using other protocols on those common ports. The AV may not affect all sites, so Speedtest might slip past; however, since Pete said e-mail was glacially slow and so was "everything else" which often points to web traffic and yet web traffic was not slow for the Speedtest site. All we have is e-mail (but not client nor protocol) and "something" else which is unidentified for network traffic. "e-mail and everything else" is like when someone says, "it's this or something". Well, the "or something" covers everything else, the statement becomes global to everything and anything (if not feasible), so all they've said is "it's something". Well, duh. Hardly narrows down what you actually observed or experienced. Does "everything else" include FTP[S], telnet, XMPP chat, VOIP, HTTP only or HTTPS only or both, NNTP, SCP, NTP, DNS, BitTorrent, Finger, SSH, or ... what specifically? Does "e-mail" mean POP, IMAP, SMTP, Exchange, WebDAV (some e-mail sites still support it), or some other e-mail protocol that I'm not including right now? Impossible for others to know just what "everything else" is without knowing in which apps the OP is experiencing glacial network response. I picked e-mail (which could be POP, IMAP, SMTP, WebDAV, Exchange). Neither the e-mail client nor the account access protocol were mentioned. "E-mail" (and only that protocol group) seemed as good a choice as any other on which to focus, especially since that was the only one mentioned. I don't know how to troubleshoot "everything else" other than to give generic help as in "Disable anti-virus and retest" and "Disable all startup programs and retest" (although "reboot Windows into its safe mode w/networking and retest" might be a bit easier). |
#6
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
Per VanguardLH:
"e-mail and everything else" is like when someone says, "it's this or something". Well, the "or something" covers everything else, the statement becomes global to everything and anything (if not feasible), so all they've said is "it's something". My Bad.... and it drives *me* nuts when people come to me with vague generalities.... In my little world, "Everything Else" is the load time for web pages. Going to install BItMeter II, wait for a recurrence of the problem; and then, instead of re-booting, try disabling Avast's mail scanner (although that would seem tb moot in light of the web page load time thing... but I might be wrong about the web pages and some coincident situation may have been present) -- Pete Cresswell |
#7
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
On Tue, 05 Jun 2018 10:39:15 -0400, "(PeteCresswell)"
wrote: Per VanguardLH: "e-mail and everything else" is like when someone says, "it's this or something". Well, the "or something" covers everything else, the statement becomes global to everything and anything (if not feasible), so all they've said is "it's something". My Bad.... and it drives *me* nuts when people come to me with vague generalities.... In my little world, "Everything Else" is the load time for web pages. Going to install BItMeter II, wait for a recurrence of the problem; and then, instead of re-booting, try disabling Avast's mail scanner (although that would seem tb moot in light of the web page load time thing... but I might be wrong about the web pages and some coincident situation may have been present) You might also take a look at a program called LAN Speed Test, available he https://totusoft.com/lanspeed They have a free and a paid version, but it seems to be all in a single download. It's been a while since I installed it and I don't remember clearly, but the website says this: "After installing LAN Speed Test v4, it begins in (Lite) mode. LAN Speed Test (Lite) is fully functional with no time limits, etc. - only some of the more advanced features are disabled." You don't need the advanced features for a simple test. Anyway, the idea is to test the speed of your LAN (you'll need a second PC) so that you can rule out your local PC. When email and web get slow, test your speed to another PC on your LAN. If it's as fast as it normally is, the problem isn't your PC. If it's slower than normal, it could be your PC. Test the Internet stuff from your second PC. -- Char Jackson |
#8
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
On Fri, 01 Jun 2018 16:47:01 -0400, "(PeteCresswell)" wrote:
This has been going on for several weeks: download speed on my mail client and everything else I try is terrible - as in glacially slow. Then I reboot the PC - just the PC, nothing else - and speeds return to normal. The weird part is that SpeedTest.net's numbers are about the same both before and after. So it's got to be something going South in my OS, right? But what? It might be useful to analyze with something like CCleaner, if only to see what it shows. Of course, that comes after what all the smarter-than-I folks have posted here. -- croy |
#9
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
(PeteCresswell) wrote:
Per VanguardLH: "e-mail and everything else" is like when someone says, "it's this or something". Well, the "or something" covers everything else, the statement becomes global to everything and anything (if not feasible), so all they've said is "it's something". My Bad.... and it drives *me* nuts when people come to me with vague generalities.... In my little world, "Everything Else" is the load time for web pages. Going to install BItMeter II, wait for a recurrence of the problem; and then, instead of re-booting, try disabling Avast's mail scanner (although that would seem tb moot in light of the web page load time thing... but I might be wrong about the web pages and some coincident situation may have been present) Disabling/removing/uninstalling the e-mail scanner in Avast was a suggestion to get rid of superfluous bloat in the program. Disabling ALL of Avast (you can disable permanently, for 10 minutes, or until the next Windows reboot) is what I suggested to look at your sluggish network speed. If the didn't help, running the web browser in its safe mode would be my next suggestion. That would eliminate interference by any add-ons you installed into the web browser. Those could affect bandwidth but not e-mail unless "e-mail" to you is using the e-mail provider's webmail client via web browser. You said "mail client" so it appears you are using a local e-mail client, not a web browser, which means e-mail traffic (POP, IMAP, SMTP, Exchange) was slow and so was HTTP/S traffic. The AV could be common to both e-mail and web traffic: if you installed Avast's Mail Shield then it interrogates your e-mail traffic, and Avast will monitor your web traffic (but HTTPS can only be monitored if that option is enabled in Avast). Do you run any other anti-malware other than Avast? While you can have multiple AVs installed, only one should be active at a time. You install one to be the on-access (real-time) scanner and use the others ONLY for manually-instigated scans. |
#10
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
Paul wrote:
(PeteCresswell) wrote: This has been going on for several weeks: download speed on my mail client and everything else I try is terrible - as in glacially slow. Then I reboot the PC - just the PC, nothing else - and speeds return to normal. The weird part is that SpeedTest.net's numbers are about the same both before and after. So it's got to be something going South in my OS, right? But what? Something to do with your router ? ******* https://support.speedtest.net/hc/en-...lt-calculated- "The client establishes multiple connections with the server over port: 8080 " So then, there are several things special about speedtest.net 1) Probably doesn't go looking for a web proxy ? Is the usage of web proxy servers port number sensitive ? 2) Uses port 8080 on outgoing connection to Speedtest server. 3) Uses Adobe Flash for the interface. 4) Uses a web browser to conduct the test. ******* You could also try some tests with: 1) A second computer. 2) Your current computer, only running a Linux LiveCD (to see if a different network stack helps). Paul Interesting idea. I've had routers start to go flaky, slowdown, and eventually die. Most consumer-grade routers rely solely on convection for cooling, no fans. However, I cannot get how the router could be the problem. The OP said network bandwidth was okay when he rebooted his PC and gradually got slower. How would a router even know a host got rebooted? Even if QoS (Quality of Service) were configured in the router to give some host higher priority for traffic rate, that would constantly throttle the non-QoS hosts, not boost them (after a reboot of which the router would be unaware) and then degrade their bandwidth (well, short of traffic shaping which I sincerely doubt the OP has one of those switches). Seems like the OP is doing something after the PC boots that continues to increasingly suck up bandwidth, like maybe keep opening more and more tabs in the web browser, especially to web pages with dynamic content that keep updating themselves even when the tab is in the background in the web browser. The CPU still gets involved with network traffic so a weak or overly busy CPU will result in a slow network. The OP didn't mention what is the CPU usage when he notices the slowdown that eventually gets slow enough for when he notices it. However, the OP says speed is glacial and then okay after a reboot. He never really does not say that during a Windows session if network speed gradually gets slow, suddenly gets slow, is slow for the entire Windows session and he gets lucky with a reboot where the next entire Windows session is okay for network speed. Startup programs get loaded within about 5 minutes after the Windows kernel loads, so those shouldn't be impacting a gradual increase in network slowdown (just for loading them but don't know what they all do after loaded). |
#11
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
VanguardLH wrote:
Paul wrote: (PeteCresswell) wrote: This has been going on for several weeks: download speed on my mail client and everything else I try is terrible - as in glacially slow. Then I reboot the PC - just the PC, nothing else - and speeds return to normal. The weird part is that SpeedTest.net's numbers are about the same both before and after. So it's got to be something going South in my OS, right? But what? Something to do with your router ? ******* https://support.speedtest.net/hc/en-...lt-calculated- "The client establishes multiple connections with the server over port: 8080 " So then, there are several things special about speedtest.net 1) Probably doesn't go looking for a web proxy ? Is the usage of web proxy servers port number sensitive ? 2) Uses port 8080 on outgoing connection to Speedtest server. 3) Uses Adobe Flash for the interface. 4) Uses a web browser to conduct the test. ******* You could also try some tests with: 1) A second computer. 2) Your current computer, only running a Linux LiveCD (to see if a different network stack helps). Paul Interesting idea. I've had routers start to go flaky, slowdown, and eventually die. Most consumer-grade routers rely solely on convection for cooling, no fans. However, I cannot get how the router could be the problem. The OP said network bandwidth was okay when he rebooted his PC and gradually got slower. How would a router even know a host got rebooted? Even if QoS (Quality of Service) were configured in the router to give some host higher priority for traffic rate, that would constantly throttle the non-QoS hosts, not boost them (after a reboot of which the router would be unaware) and then degrade their bandwidth (well, short of traffic shaping which I sincerely doubt the OP has one of those switches). Seems like the OP is doing something after the PC boots that continues to increasingly suck up bandwidth, like maybe keep opening more and more tabs in the web browser, especially to web pages with dynamic content that keep updating themselves even when the tab is in the background in the web browser. The CPU still gets involved with network traffic so a weak or overly busy CPU will result in a slow network. The OP didn't mention what is the CPU usage when he notices the slowdown that eventually gets slow enough for when he notices it. However, the OP says speed is glacial and then okay after a reboot. He never really does not say that during a Windows session if network speed gradually gets slow, suddenly gets slow, is slow for the entire Windows session and he gets lucky with a reboot where the next entire Windows session is okay for network speed. Startup programs get loaded within about 5 minutes after the Windows kernel loads, so those shouldn't be impacting a gradual increase in network slowdown (just for loading them but don't know what they all do after loaded). An example of a router problem, is when a router has actually been exploited by an external attack. After that, who knows what symptoms it might display. There was a recent warning from the FBI, that around 100,000 home routers needed to be rebooted (when one tech site claimed the instruction probably should have read "press the reset button and re-enter settings"). It's pretty hard for anyone at home, to keep track of the status of their hardware with stuff like that going on. Paul |
#12
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
Per J. P. Gilliver (John):
I have BitMeter2 (http://codebox.org.uk/pages/bitmeter2), with the audio turned on, and set to 100 kB (which IIRR is the default). I find this a useful way of monitoring what's going on Have been watching the BitMeter numbers for a few days now and am puzzled by the Upload numbers. Seems tb a constant stream (about 4 gigs/hour) of upload activity. Or am I not reading it right: -------------------------------------------- Time Date Downloaded Uploaded Both Directions 17:00-18:00 6/13/2018 4,869,820,558 9,740,277,884 14,610,098,442 16:00-17:00 6/13/2018 26,795,785,316 5,811,039,039 32,606,824,355 15:00-16:00 6/13/2018 27,773,465,836 5,889,576,609 33,663,042,445 14:00-15:00 6/13/2018 51,289,619,672 5,720,544,725 57,010,164,397 13:00-14:00 6/13/2018 29,723,882,897 4,743,159,808 34,467,042,705 12:00-13:00 6/13/2018 46,173,670,023 5,079,576,195 51,253,246,218 11:00-12:00 6/13/2018 27,101,647,399 4,503,602,022 31,605,249,421 10:00-11:00 6/13/2018 27,068,597,293 4,575,853,604 31,644,450,897 09:00-10:00 6/13/2018 26,060,657,588 4,572,366,433 30,633,024,021 08:00-09:00 6/13/2018 34,545,416,596 4,624,677,899 39,170,094,495 07:00-08:00 6/13/2018 35,277,437,209 4,482,902,340 39,760,339,549 06:00-07:00 6/13/2018 26,661,293,052 4,500,661,541 31,161,954,593 05:00-06:00 6/13/2018 29,110,852,533 4,443,190,213 33,554,042,746 04:00-05:00 6/13/2018 30,605,391,246 4,592,592,632 35,197,983,878 03:00-04:00 6/13/2018 32,557,987,426 4,812,075,729 37,370,063,155 02:00-03:00 6/13/2018 31,169,526,473 5,186,570,054 36,356,096,527 01:00-02:00 6/13/2018 30,688,020,806 7,872,368,493 38,560,389,299 00:00-01:00 6/13/2018 32,869,953,380 4,539,795,659 37,409,749,039 23:00-00:00 6/12/2018 34,852,944,906 4,642,765,341 39,495,710,247 22:00-23:00 6/12/2018 30,563,017,612 4,709,557,928 35,272,575,540 21:00-22:00 6/12/2018 30,519,792,213 4,262,828,380 34,782,620,593 20:00-21:00 6/12/2018 26,610,853,481 3,114,759,125 29,725,612,606 19:00-20:00 6/12/2018 30,337,013,503 8,903,623,768 39,240,637,271 18:00-19:00 6/12/2018 53,871,720,485 5,862,303,423 59,734,023,908 17:00-18:00 6/12/2018 41,313,271,665 18,608,665,875 59,921,937,540 16:00-17:00 6/12/2018 53,083,789,280 27,288,721,549 80,372,510,829 15:00-16:00 6/12/2018 28,392,219,850 5,842,216,328 34,234,436,178 14:00-15:00 6/12/2018 31,920,737,876 5,876,768,345 37,797,506,221 13:00-14:00 6/12/2018 28,076,997,805 7,118,159,898 35,195,157,703 12:00-13:00 6/12/2018 28,419,391,797 6,558,277,139 34,977,668,936 11:00-12:00 6/12/2018 28,154,730,241 5,953,469,092 34,108,199,333 10:00-11:00 6/12/2018 27,331,219,052 5,718,509,807 33,049,728,859 09:00-10:00 6/12/2018 26,240,868,675 5,248,320,374 31,489,189,049 08:00-09:00 6/12/2018 34,304,311,024 5,747,460,612 40,051,771,636 07:00-08:00 6/12/2018 35,537,705,478 5,812,964,467 41,350,669,945 06:00-07:00 6/12/2018 26,522,162,836 5,824,744,258 32,346,907,094 05:00-06:00 6/12/2018 27,685,552,396 5,983,519,423 33,669,071,819 04:00-05:00 6/12/2018 30,532,265,779 5,919,154,282 36,451,420,061 03:00-04:00 6/12/2018 31,764,717,931 6,203,738,118 37,968,456,049 02:00-03:00 6/12/2018 31,049,954,889 6,404,692,250 37,454,647,139 01:00-02:00 6/12/2018 30,928,931,100 6,049,601,510 36,978,532,610 00:00-01:00 6/12/2018 32,940,561,309 8,505,139,068 41,445,700,377 23:00-00:00 6/11/2018 35,154,954,480 5,962,429,799 41,117,384,279 22:00-23:00 6/11/2018 31,106,465,232 5,968,135,513 37,074,600,745 21:00-22:00 6/11/2018 30,747,703,943 4,892,555,420 35,640,259,363 20:00-21:00 6/11/2018 31,621,706,489 5,328,784,552 36,950,491,041 19:00-20:00 6/11/2018 30,985,422,620 5,967,181,512 36,952,604,132 18:00-19:00 6/11/2018 35,159,672,573 5,715,406,034 40,875,078,607 17:00-18:00 6/11/2018 26,666,398,462 6,008,878,016 32,675,276,478 16:00-17:00 6/11/2018 26,873,172,902 5,768,784,729 32,641,957,631 15:00-16:00 6/11/2018 27,110,029,199 6,004,525,050 33,114,554,249 14:00-15:00 6/11/2018 34,461,200,183 5,685,351,163 40,146,551,346 13:00-14:00 6/11/2018 26,105,596,331 3,432,786,581 29,538,382,912 12:00-13:00 6/11/2018 26,041,233,509 5,324,126,178 31,365,359,687 11:00-12:00 6/11/2018 27,563,621,653 6,072,760,950 33,636,382,603 10:00-11:00 6/11/2018 26,244,854,398 6,120,726,626 32,365,581,024 09:00-10:00 6/11/2018 26,212,526,229 5,080,872,973 31,293,399,202 08:00-09:00 6/11/2018 33,135,380,769 2,068,330,693 35,203,711,462 07:00-08:00 6/11/2018 35,627,061,352 5,486,461,436 41,113,522,788 06:00-07:00 6/11/2018 27,086,380,545 5,688,869,233 32,775,249,778 05:00-06:00 6/11/2018 28,836,736,809 5,433,465,168 34,270,201,977 04:00-05:00 6/11/2018 31,540,566,024 5,090,993,283 36,631,559,307 03:00-04:00 6/11/2018 32,927,634,816 5,441,779,437 38,369,414,253 02:00-03:00 6/11/2018 33,167,318,217 5,669,602,480 38,836,920,697 01:00-02:00 6/11/2018 30,707,474,985 5,296,709,958 36,004,184,943 00:00-01:00 6/11/2018 32,737,460,329 9,266,888,106 42,004,348,435 23:00-00:00 6/10/2018 31,919,574,642 5,355,309,469 37,274,884,111 22:00-23:00 6/10/2018 31,680,510,208 5,091,875,621 36,772,385,829 21:00-22:00 6/10/2018 31,687,536,318 5,149,156,999 36,836,693,317 20:00-21:00 6/10/2018 29,392,504,291 2,732,379,286 32,124,883,577 19:00-20:00 6/10/2018 38,215,414,181 2,629,098,536 40,844,512,717 18:00-19:00 6/10/2018 33,492,707,602 5,489,755,315 38,982,462,917 17:00-18:00 6/10/2018 31,890,576,103 5,052,860,634 36,943,436,737 16:00-17:00 6/10/2018 29,867,617,774 4,624,070,580 34,491,688,354 15:00-16:00 6/10/2018 29,947,060,185 4,866,484,407 34,813,544,592 14:00-15:00 6/10/2018 30,241,687,961 8,277,745,623 38,519,433,584 13:00-14:00 6/10/2018 30,655,426,686 10,467,270,256 41,122,696,942 12:00-13:00 6/10/2018 30,069,417,522 3,959,409,210 34,028,826,732 11:00-12:00 6/10/2018 35,731,968,195 4,955,768,944 40,687,737,139 10:00-11:00 6/10/2018 36,721,423,025 6,921,979,664 43,643,402,689 09:00-10:00 6/10/2018 40,068,047,790 4,671,569,021 44,739,616,811 08:00-09:00 6/10/2018 26,859,762,774 5,208,989,254 32,068,752,028 07:00-08:00 6/10/2018 26,652,489,103 5,809,073,748 32,461,562,851 06:00-07:00 6/10/2018 29,441,228,939 5,597,752,429 35,038,981,368 05:00-06:00 6/10/2018 29,227,262,029 5,736,512,618 34,963,774,647 04:00-05:00 6/10/2018 31,217,952,001 5,782,814,793 37,000,766,794 03:00-04:00 6/10/2018 32,125,400,330 6,195,225,624 38,320,625,954 02:00-03:00 6/10/2018 31,219,082,381 6,309,864,626 37,528,947,007 01:00-02:00 6/10/2018 30,791,398,838 5,862,182,114 36,653,580,952 00:00-01:00 6/10/2018 30,759,124,698 6,375,503,464 37,134,628,162 23:00-00:00 6/9/2018 31,169,496,212 5,875,544,667 37,045,040,879 22:00-23:00 6/9/2018 35,143,597,910 5,816,278,248 40,959,876,158 21:00-22:00 6/9/2018 35,417,360,264 6,216,591,366 41,633,951,630 20:00-21:00 6/9/2018 27,967,682,776 5,704,476,451 33,672,159,227 19:00-20:00 6/9/2018 26,991,508,403 4,922,038,491 31,913,546,894 18:00-19:00 6/9/2018 28,564,288,507 5,218,466,555 33,782,755,062 17:00-18:00 6/9/2018 28,849,394,243 5,739,819,164 34,589,213,407 -------------------------------------------- -- Pete Cresswell |
#13
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
Wolf K wrote:
PeteCresswell wrote: Have been watching the BitMeter numbers for a few days now and am puzzled by the Upload numbers. Seems tb a constant stream (about 4 gigs/hour) of upload activity. Have you used one of the torrent download clients? If so, your machine is probably now a torrent server. Or else it's infected with a bot. Not just torrent. Some of the "free" VPN clients will steal bandwidth to sell elsewere. If you don't subscribe to the sharing service, they throttle your downstream bandwidth. Hola was one that sold your bandwidth for their "free" service. You became a Tor-like exit node for Hola's paid service customers. https://www.pcworld.com/article/2928...et-attack.html https://en.wikipedia.org/wiki/Hola_(VPN)#Criticism Articles mention that Betternet VPN uses 14 tracking libraries in their client. Other free VPNs were found to be malicious: VPN Free, Tigervpns, Rocket VPN, Cyberghost, and EasyOVPN. https://fossbytes.com/is-free-vpn-safe/ From reading about VPNs, the only secure ones are those you pay for (and only some of those, not all of them) or the one with a known and single endpoint, like the one your employer grants a loaner laptop they give you to work from home (which usually means you connect to a "safe" subnet in their corporate network which might restrict access to some hosts - as it did when trying to get through the corporate network to our alpha lab hosts on a different subnet until they changed host permissions for that work-at-home laptop). Of the paid VPN services, I remember reading several security and vulnerability white papers about them and only a couple were secure. Many article just list their favorites for VPNs without actually ever probing or testing them. Android VPN apps generally suck. 84% of them were found to leak the user's true IP address, especially when it came to using IPv6. Many were okay (not all) in secreting the user's IPv4 address but couldn't handle IPv6 so they just passed it onto the target host thus exposing the user's true IP address. DNS leaks are another test of VPN security: connect to a VPN server outside your country and use DNS tools (e.g., dnsleaktest.com) to see if IP address, location, and other details matching your ISP get leaked. A secure VPN service must provide their own encrypted DNS system. WebRTC (used within web browsers) can leak your intranet IP address (what you get from your router's DHCP server or the static IP address you assigned to your host). Many sites and users don't like outsiders from mapping their internal network. WebRTC gets used in voice and video chat clients along with P2P filesharing without the need to install plug-ins into the web browser. The VPN cannot stop that leak since it is the web browser as client issuing WebRTC API calls to the server. Disabling WebRTC in the web browser, if an option, plugs that leak. In Firefox in about:config, "media.peerconnection.enabled" is set to False (disabled). In Google Chrome, you used to be able to go to chrome://flags/#disable-webrtc to enable the disable. As typical of experimental code with Chrome, this one went away. Now you have to install an extension to disable WebRTC (e.g., https://chrome.google.com/webstore/d...ljpnbhleegehm). Go to ipleak.net. See if its WebRTC reveals your intranet IP address. With Firefox and media.peerconnection.enabled = False, ipleak.net cannot discover my intranet IP address. In Google Chrome where there is no longer a disable WebRTC option (and no add-on installed to disable WebRTC), yep, ipleak.net uses RTC to get my intranet IP address. With the WebRTC Control add-on installed in Google Chrome, ipleak.net cannot use RTC to get my intranet IP address. Lots of features have been added to web browsers that anti-security to the user just because, gee, sites like to use the features and the web browser authors are catering to the sites' desires, not yours. WebRTC relies on Javascript -- but who wants to disable Javascript in their web browser which squashes the content at most sites? Besides using Javascript to make web pages interactive, many sites have gone to dynamic content which uses Javascript to decide what content you get. WebRTC is not a VPN security issue. It is a web browser issue that can remain exposed over a VPN. Tor might be one reason for the constant upstream traffic. Anything like Tor, like a VPN usurping a portion of your idle bandwidth, is another cause. Time the OP kills all startup programs to enable them one at a time to narrow into which one generates all the traffic ... assuming SysInternals' TCPview, Wireshark, or another network monitor doesn't expose the process generating all the upstream traffic. Yep, malware can steal bandwidth, too, either to steal your files or employ you as one of their zombies. |
#14
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
PeteCresswell wrote:
Have been watching the BitMeter numbers for a few days now and am puzzled by the Upload numbers. Seems tb a constant stream (about 4 gigs/hour) of upload activity. Tried using a network monitor, like SysInternals' TCPview, to see what process is generating all the upstream traffic? |
#15
|
|||
|
|||
Download Speed Miserable, then A-OK following PC reboot?
Per Wolf K:
Have you used one of the torrent download clients? If so, your machine is probably now a torrent server. Yes - BitTorrent. Do you mean even without anything explicitly running? That would seem to expose people who turn their VPN services on and off. Just uninstalled it on GPs.... -- Pete Cresswell |
Thread Tools | |
Display Modes | Rate This Thread |
|
|