Upload Download ratio

Good day

In the last couple of days I have noticed that my upload packets are much in excess of the downloads. For Instance Upload 70500 packets- vs Download 15250. I ran several malware/virus programs but came up clean. Found a similar problem on this site and the advice was check with your provider. I did this but had no joy.
Right now I am showing D14000 packets-U 40,000 packets and I know that I have not uploaded anything other than the normal commands. I am restricted to
the amount I can download every month being on a 3 Gig Cap so unrestricted uploading is possibly a problem for me. Would appreciate any thoughts on this problem.

Thanks to anyone who responds

 

Are you the only computer connected? There are a lot of packets sent out announcing various things to the local network, not all packets sent out the adapter go world wide. Go get wireshark and look at whats going on.

 

Like Foogoo says wireshark is definitely the answer, you'll then be able to see eveything thats going on, whether it be UL or DL !

 

Thanks Foogoo and Rusty Jack. I will look at wireshark but in the meantime
the figures come my connection. There are two pcs on the router but rarely both working at once.

 

Forget wireshark, and this is probably the answer, if you use a bit torrent type client or actually most p2p clients, any files you download, are automaticly shared back out. Chances are thats why your uploads are high, and look into that route. Or if this is say the windows local area connection window showing high uploads, thats not traffic going out to the internet in every case.

 

Thanks Coleman

That did occur to me and altho I have in the past used bit torrent a quick check did not show it. However I went back again after your post and found an uninstalled copy which I got rid of anyway and did a search but found nothing installed.
I use a Realtek USB wireless connection and its Status page shows various bits of info including U/D packets. At the moment this is running with the U 4000 pkts higher than the download.This is an improvement but still seems odd.
I have installed Wireshark but to be honest am having difficulty in interpreting it.
Would there by anyone out there who could do this presuming I can send the file.

Regards
PS I use Yahoo for my email and a friend of mine was grabbed in the last few days by a phishing site (in the US from what we can see). We have our own Group on Yahoo plus he is the Sec of our Assoc and so has lots of contacts. The first I was aware of it was when the day before yesterday I got an e allegedly from him asking me to let him have money for hotel and air ticket as he was stranded in London. It was very plausible and looked real as it gave an address and telephone number. I knew he had/was still up country
so I phoned to be told he was back and only a few k away. Told him story and he later came back to me to tell me about his inability to sign on to his Yahoo account.
This went out to a number of people and unfortunately one guy got taken in. Not very pleasant as the majority of us are pensioners. Reported to Fraud Squad.
I dont think this has any bearing on my U/D problem but I mention it for info.
However as a result I have in the last 36 hours created 3 sign on seals with Yahoo(To show the site is genuine when it comes up) and each time I have logged on it is gone. So I suspect that I may be a victim. I have reported it to Yahoo. Changed my password to a very strong one on their anti phisihng site and thought I would be alright.
I googled phishing as I was going to look for some protection software and was shocked to see the number of sites offering foolproof downloads for capturing passwords including those of Yahoo etc. Any advice that is available I would appreciate.
Thanks


Bogjumper`

 

Dont send people a wireshark capture file, as they can glean lots of personal info up to and including passwords sent during the time of capture, if all you see is high upload traffic on a local wireless or ethernet connection, that doesn't directly relate to high external (internet) traffic, so unless you start going over your cap, then i wouldn't worry. Is that whats happening, or are you just worried seeing that high amount of packets on the wireless? Problem worth heading over to the malware forum then for a visit Wireshark is a good program if your trained on how to read the data given, but if you dont know, and send a packet capture file to someone, they could use that to get info about you, and your traffic, probably even passwords to sites that you logged onto during the capture.

 

I like how 2 of my ideas have been restated and the other poster got thanked. In wireshark you can tell quickly if the IP address are local or Internet based.
Look at the source and destination, there is your answer.
Or just forget wireshark and boil some chicken bones and chant to the network gods your traffic goes down, they listen most of the time.

 

Wireshark is very confusing to many people, the type of people asking questions, so unless you tell them step by step how to run and do said this with wireshark, its a bad suggestion, sorry.

 

Hi

Sorry about that but you must have missed my previous post. I say again for you
Thanks Foogoo and Rusty Jack. I will look at wireshark but in the meantime
the figures come my connection. There are two pcs on the router but rarely both working at once.
11-17-10 12:53
Lastly I have decided to change my IP as this crowd are pretty useless and I have to pay per Gigabit at a miserable 384k U/D. So again thanks to all and I will close this subject.
Theres something new out of Africa every day- Scipio Minor

Bogjumper

 

Are you saying the forum is useless?

The other thing is Windows downloads updates 'in the background', some printer software checks in too.. best bet is to shut the internet off when your not 'on' it. Disable the adapter or unplug the router.

 

Lastly I have decided to change my IP as this crowd are pretty useless and I have to pay per Gigabit at a miserable 384k U/D

You are misinterpreting my statement - by crowd I meant my IP are useless.
I have had nothing but help from the Forum for which I am grateful and I think perhaps that stands out in my replies now and in the past. Taking offence at the drop of a hat is not a worthwhile game.
I again finally close this correspondence on my problem

A luego