OpenWrt Forum Archive

Topic: internet usage

The content of this topic has been archived on 28 Mar 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Post #1
enkavak
25 Sep 2017, 12:39

Hi

   In my router, there is some serveses using internet without my permission. They are increasing the internet usage.

   How can I detect that Which are the programs using internet.

   appoximately 60MB of data with in 12 hours. There is a leak in a service.


          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:161338 errors:0 dropped:0 overruns:0 frame:0
          TX packets:209361 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:64144074 (61.1 MiB)  TX bytes:59993519 (57.2 MiB)

tcp        0      0 5.26.x.x:1111       24.133.209.36:10321     ESTABLISHED
tcp        0      0 5.26.x.x:45701      order2.ebay.in:https    TIME_WAIT
tcp        0      0 5.26.x.x:ssh        customer.worldstream.nl:2361 ESTABLISHED
tcp        0      0 5.26.x.x:ssh        62.112.11.9:43253       ESTABLISHED
tcp        0      0 5.26.x.x:ssh        194.88.107.164:54077    ESTABLISHED
tcp     3242      0 5.26.x.x:54360      104.16.120.50:https     ESTABLISHED
tcp        0      0 5.26.x.x:45705      40.101.43.194:imaps     ESTABLISHED
tcp        0      0 5.26.x.x:51018      104.16.119.50:https     TIME_WAIT

(Last edited by enkavak on 25 Sep 2017, 13:18)

Post #2
davidc502
25 Sep 2017, 14:49
enkavak wrote:

Hi

   In my router, there is some serveses using internet without my permission. They are increasing the internet usage.

   How can I detect that Which are the programs using internet.

   appoximately 60MB of data with in 12 hours. There is a leak in a service.


          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:161338 errors:0 dropped:0 overruns:0 frame:0
          TX packets:209361 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:64144074 (61.1 MiB)  TX bytes:59993519 (57.2 MiB)

tcp        0      0 5.26.x.x:1111       24.133.209.36:10321     ESTABLISHED
tcp        0      0 5.26.x.x:45701      order2.ebay.in:https    TIME_WAIT
tcp        0      0 5.26.x.x:ssh        customer.worldstream.nl:2361 ESTABLISHED
tcp        0      0 5.26.x.x:ssh        62.112.11.9:43253       ESTABLISHED
tcp        0      0 5.26.x.x:ssh        194.88.107.164:54077    ESTABLISHED
tcp     3242      0 5.26.x.x:54360      104.16.120.50:https     ESTABLISHED
tcp        0      0 5.26.x.x:45705      40.101.43.194:imaps     ESTABLISHED
tcp        0      0 5.26.x.x:51018      104.16.119.50:https     TIME_WAIT

Is the traffic not DNS in nature?

(Last edited by davidc502 on 25 Sep 2017, 19:06)

The discussion might have continued from here.