some freak is downloading on my ADSL line!

[techead]

Im at work, and I have a dedicated 512K IS ADSL line for our Bloomberg Terminal...

Im constantly struggling on this line, and now I know why. Some idiot is downloading on it, Im sure of it.

The line is not flapping, no spikes, just erratic high pings on both int and local for extended periods of time, then all of a sudden drops to a stable low ping for a while (while he gets his next download ready! )

Anyway I can trace and nail this guy

 

[Nerfherder]

Do you have a router ?

 

[mercurial]

Login to your ISP control panel. They should be able to show you where you connected from. You should be able to pick up his IP address from there...

 

[AnomalyNexus]

Since you are seeing spikes, someone else is utilizing your physical line. ISP page won't help in that case.

Easiest way to check this: Switch off you PC. Go to router & watch the lights. If it shows activity then your suspicions are confirmed.

Log into the router config page. Most routers show active connections. On mine its called "attached devices". From that you should be able to get the MAC addresses & IP addr of all connected PCs and maybe the computer name too. Once you have those your pretty much guaranteed to find to bastard sooner or later.

Disable wireless on the router (assuming you don't use wireless).

 

[techead]

thanks guys, Im going to try and get our network admin to get into the router... I think that might be my best bet.

Tell me, if our router doesnt show it, then what is my next option?

 

[rurapente]

if you suspect someone is using the line, plug a phone cable into it, and the other end into a wall plug in the wall outlet. Wait 10 mins, look for smoke. (remove your equipment first )

PS - check no one from telkom working outside, jail is a pain these days.

 

[The_Unbeliever]

...or you can install Smoothwall (or any other dedicated firewall) to monitor all outgoing connections.

You can also block per IP/MAC should you want to

 

[AnomalyNexus]

Tell me, if our router doesnt show it, then what is my next option?

There is no next option. If its not going through the router then its not there. Can't have two routers on the same line.

 

[gregmcc]

run a network sniff and check source and destination IP's

 

[Nerfherder]

There is no next option. If its not going through the router then its not there. Can't have two routers on the same line.

+1

Either this person is plugged in to your router or on your wireless connections.

 

[techead]

run a network sniff and check source and destination IP's

 

[AnomalyNexus]

run a network sniff and check source and destination IP's

He is suggesting that you use a packet sniffer in promiscuous mode to detect traffic between the offenders PC and the router.

Not the route I'd take (you'd need to install drivers to run in promiscuous mode under windows), but it will also work.

 

[kevinswan007]

ummm, simple solution. if its a wireless router, setup or change the wireless and router password.

otherwise unplug any other network cables thats not going into your pc.

problem solved.

 

[sevoii]

Yeah, uhm. I didn't know people can still your [physical] bandwidth without being on your line :O

Cap maybe, bandwidth, no.