Tracker is SCREWED!

[chopsky]

Downloaded : 907.3861 MB for the month
Uploaded : 1.6179 GB for the month
Total bandwidth used : 2.5040 GB for the month

How is that possible in the first 3 days!? I havnt even done in excess of 200 mb?!?
Rpm, any idea who I could contact? Last time I tried, i had to phone 100 different people and in the end I was promised an email I never received. ( TEELKOOOOOOOOOOOOOOOOOM!!! *sigh*

 

[chopsky]

Just after posting this problem, i've come to realise the problem with the tracker. What it does, is it waits for the user to disconnect from the internet, and only once one has done that, does it add the amount used to the tracker. I dsconnected at approx 02:00 on the 1st December with my Upload and Download both over 1 gigabyte, thus what it did was add those values to my tracker for the 1st instead of the 30th November where I used most of the bandwidth.
BIG TIME ANOMOLY!

 

[Andre]

If it makes you feel any better, you're not the only one that this has happened to, just look back on some earlier posts.

 

[revolator]

I had a form of worm that kept on uploading stuff. Yesterday I got capped. after installing DUMeter I saw that my PC is constantly uploading. (with netstat it looked like it was connecting to mail servers) I re-installed windows which solved the problem. So to any one out there, watch out for virusses and worms. The strange thing is that Mcfee antivirus did not pick ip this virus..


<b>That bloody cap...</b>

 

[caroper]

One of my clients had a worm that constantly uploaded and three AV programs failed to find it.

After reformatting the server three or four times I discovered that it re-infected every time we connected to the Internet. Three ADSL accounts were caped before I proved that Telkom’s Authentication Server was causing the infection.

The next week they had all sorts of publicity about having protected RSA from virus attacks and to this day ADSL users still can’t ping or trace route as a result of their innovative solution.

Unfortunately my client decided not to sue them, as we have no concrete evidence. However, the fact remains that if it eats up our bandwidth Telkom have nothing to loose.

It is even beneficial to them to infect our servers come to think of it.

Cheers
Chris

p.s. I don’t want or intend to imply a conspiracy theory.

 

[ProAsm]

I think the tracker has kicked the bucket as for me it says:
Online Time 0 | Upload 0 | Download 0 | Combined 0
[]

 

[chopsky]

Thank god I have a black-belt in the art of self-restraint.
Otherwise I'd probably be saying **** like, AHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH YOUUUUUUU $(@%* @#(*$& @#($*&(* TELKOM! @#$& YOU!
But thanks to years of practise, even with Telkom, I am able to control myself []

 

[ppret]

After 3 of my clients complained on the usage, I did some investigating. They also got caped within a week!! On our proxy and e-mail logs (logs kept at the client, not Telkom logs) showed +/- 600Mb usage. I then checked the traffic on the adaptors, and there is where I've found the problem. On the LAN adapter there was not traffic (I'm using two LAN cards, one for local LAN and one only for connecting to my ADSL pots), but at the same time on the wan adapter there is a constant 6kb stream going out. If I multiply this 6kb stream with the logged-in time, I get to Telkom's figures!! So the problem is the constant 6kb stream of data that appears on the wan adaptor. I still don't have the answer to why there is a 6kb constant data stream on the wan adaptor, but at least we now know where the Telkom logs are coming from!!!

 

[Pavlov]

I would suggest that you look at collecting network traffic off the WAN (External) NIC.

Unix/ Linux flavours generally come with some sort of sniffer. Suggest http://www.ethereal.com/ if you are looking for one to run on windows (I am sure there are more out there).

If you capture the traffic specifically for that network card, you should see what is making up this traffic.

Please post a little more about the systems ie OS setups etc to help some more.