LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 01-17-2013, 01:13 PM   #1
joel_k
LQ Newbie
 
Registered: Jan 2008
Posts: 8

Rep: Reputation: 0
Find out large data transfers?


Several times lately I have observed my wifi interface apparently transmitting large amounts of data for extended periods of time when I am not doing anything. The first time this happened, I was on my laptop looking at websites, one of which was probably hacker oriented, on firewalling and bridging. Everything slowed to a crawl and firefox appeared to have six or seven copies of itself open. I killed everything, switched to using chrome for the time being, and assumed that firefox had a security flaw. This system was an up to date lubuntu 12.04 install on a netbook. Next time this happened was my home machine and I was using chrome. This time I investigated with netstat and found dozens of connections to ports 80, 443, and 21 to various addresses from high order ports on my machine. They continued even when the browser closed, and data transmission continued as well. This was a fedora 16 install also kept up to date. I am just wondering how one goes about investigating this sort of thing. A website would be fine. What I am finding on google isn't helping me out as much as I would like.

Thanks
Joel
 
Old 01-17-2013, 03:09 PM   #2
Habitual
LQ Addict
 
Registered: Jan 2011
Location: Youngstown, Ohio
Distribution: LM17.1/Xfce4.11.8
Posts: 7,159
Blog Entries: 10

Rep: Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968
Firefox version?

Any add-ons?
 
Old 01-17-2013, 09:21 PM   #3
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,331
Blog Entries: 55

Rep: Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529
Quote:
Originally Posted by joel_k View Post
I am just wondering how one goes about investigating this sort of thing.
Capture traffic, then analyze with for example Wireshark?
 
Old 01-20-2013, 01:35 PM   #4
joel_k
LQ Newbie
 
Registered: Jan 2008
Posts: 8

Original Poster
Rep: Reputation: 0
On firefox I have springpad, on chrome I have springpad and feedly for extenstions. Firefox is currently 17.0.1, but it might have updated since I posted. Chrome is version 24.0.1312.52 on this machine. I had thought of trying tcpdump, but I had only used this once and it seemed painful. I kind of wanted to write some iptables rules and block whatever was causing problems, but I am not sure it is so simple as that.
 
Old 01-20-2013, 02:02 PM   #5
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,331
Blog Entries: 55

Rep: Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529Reputation: 3529
Moved: Given the discrepancy between your question and your reply I've renamed the thread title to something less sensational. Furthermore this thread is deemed more suitable in the Newbie forum and has been moved accordingly to help your thread/question get the exposure it deserves.
 
Old 01-20-2013, 04:51 PM   #6
sneakyimp
Senior Member
 
Registered: Dec 2004
Posts: 1,001

Rep: Reputation: 67
Wireshark can analyze a file made with tcpdump. It's pretty neat to analyze traffic. You can start tcpdump, specifying a file for it to write all of your traffic to, and then open the file in wireshark which will allow you to group related packets together, inspect the data transmitted, etc. It's very useful for determining whether data is encrypted, etc.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Large FTP Transfers Hanging CentOS OstermanA Linux - Server 4 03-12-2011 05:29 AM
memcpy_toio transfers data in 4 byte chunks, but I need to transfer data in one lump. jbreaka4lyfe Linux - Embedded & Single-board computer 2 06-02-2008 12:25 PM
Large file transfers over a network connection. toko2 Linux - Networking 3 09-21-2006 01:05 PM
USB Storage - Crashes on Large Transfers MikeyCarter Linux - General 1 05-16-2005 07:59 PM
RH 9.0 / Samba Large File Transfers rjesse Linux - General 3 01-26-2005 10:59 AM


All times are GMT -5. The time now is 02:27 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration