Re: Mysterius Download

2014-02-28 Thread Robin
On 28 February 2014 13:06, Markos mar...@c2o.pro.br wrote:
 Hi Everybody,

 The browser takes a long time to open the pages but the applet properties
 of network connection shows a high download rate.

 But I'm not downloading anything!

 How to find out which program is doing this mysterious download and block
 this download?

 I'm using Debian Squeeze.

 Thank you,
 Markos


 --

netstat -p


-- 
rob


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caozwb-rmohayr4u_rf1axvphvx45njwnjgwurnzpaqogqsm...@mail.gmail.com



Re: Mysterius Download

2014-02-28 Thread Diogene Laerce

Hi,

The browser takes a long time to open the pages but the applet 
properties of network connection shows a high download rate.


But I'm not downloading anything!

How to find out which program is doing this mysterious download and 
block this download?


I'm using Debian Squeeze.


You can use iftop to see which ports are involved and :

sudo netstat -vutlnp

to note the process. I think you may complete with :

sudo ps -eo pid,args | grep process

to get what command originated it.

It is what I would do anyway, some may have better solutions.

Good luck ;)

--
“One original thought is worth a thousand mindless quotings.”
“Le vrai n'est pas plus sûr que le probable.”

  Diogene Laerce


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/53109476.5020...@yahoo.fr



Re: Mysterius Download

2014-02-28 Thread Andrei POPESCU
On Vi, 28 feb 14, 10:06:12, Markos wrote:
 
 How to find out which program is doing this mysterious download
 and block this download?

nethogs

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: Mysterius Download

2014-02-28 Thread Scott Ferguson
On 01/03/14 00:06, Markos wrote:
 Hi Everybody,
 
 The browser takes a long time to open the pages but the applet
 properties of network connection shows a high download rate.

Which browser?

 
 But I'm not downloading anything!

But your browser might be e.g. extension updates, synchronising
bookmarks/extensions/passwords if you have sync enabled.

Most likely it's just checking for extension updates - you'd expect a
high download rate - just check your network statistics and see
whether it's a high volume.

I use KDE so I use KNemo show traffic (transfer speed) as well as
hourly, weekly and monthly volume statistics. I'm not familiar with the
equivalents for other desktop environments. ethstats is one of several
CLI tools that will do the same thing.

 
 How to find out which program is doing this mysterious download and
 block this download?

$ netstat --inet
will show you where you are connecting to.

e.g.:-
$ netstat --inet -p (sorry about the line wrapping).
Proto Recv-Q Send-Q Local Address   Foreign Address
State   PID/Program name
tcp0  0 vbserver.sunnysid:46471 dev.sunnyside.home:http
ESTABLISHED 13939/iceweasel
tcp0  0 192.168.1.100:46889 192.168.1.1:http
ESTABLISHED 13939/iceweasel
tcp0  0 192.168.1.100:32902 pd-in-f16.1e100.n:imaps
ESTABLISHED 4986/icedove
tcp0  0 192.168.1.100:35633 scottferguson.com.a:222
ESTABLISHED 17825/ssh
tcp0  0 192.168.1.100:44837 192.168.1.1:http
CLOSE_WAIT  16008/kwrite
tcp0  0 192.168.1.100:47602 192.168.1.1:http
ESTABLISHED 13939/iceweasel
tcp0  0 192.168.1.100:47547 192.168.1.1:http
ESTABLISHED 13939/iceweasel
tcp0  0 192.168.1.100:45692 192.168.1.1:http
ESTABLISHED 13939/iceweasel
tcp0  0 vbserver.sunnysid:57354 dev.sunnys:microsoft-ds
ESTABLISHED -
tcp0  0 192.168.1.100:40641 pa-in-f16.1e100.n:imaps
ESTABLISHED 4986/icedove
tcp0  0 vbserver.s:microsoft-ds t22.sunnyside.hom:56452
ESTABLISHED -
tcp0  0 vbserver.sunnysid:43963 dev.sunnyside.home:http
CLOSE_WAIT  16008/kwrite
tcp0  0 192.168.1.100:40562 pa-in-f16.1e100.n:imaps
CLOSE_WAIT  4986/icedove
tcp0  0 vbserver.sunnysid:43862 dev.sunnyside.home:http
CLOSE_WAIT  16008/kwrite
tcp0  0 vbserver.sunnysid:37587 dev.sunnyside.home:9100
ESTABLISHED 16624/rdesktop
tcp0  0 192.168.1.100:44833 192.168.1.1:http
CLOSE_WAIT  16008/kwrite
tcp0  0 vbserver.sunnysid:53483 dev.sunnyside.home:ssh
ESTABLISHED 16447/ssh

the 192.168.*.* addresses is the modem web control interface
the *.imaps are email connections
the *sunnysi*.* are local network machine connections
the *:222 is a ssh connection
the *:http is a web connection

The http connections are the ones you're interested in. You can find out
them with whois $domainname

If you use netstat --inet -pc
You'll get a continuous update of what's connecting to what. So start
netstat and then open your browser - and you'll see a lot of connections
to mozilla (if you are running Iceweasel/Firefox).


 
 I'm using Debian Squeeze.
 
 Thank you,
 Markos
 
 


Kind regards


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53109e9a.80...@gmail.com



Re: Mysterius Download

2014-02-28 Thread Martin Steigerwald
Am Freitag, 28. Februar 2014, 16:14:07 schrieb Andrei POPESCU:
 On Vi, 28 feb 14, 10:06:12, Markos wrote:
  How to find out which program is doing this mysterious download
  and block this download?
 
 nethogs

nethogs is sufficient for TCP and user processes.

There is also atop, but it needs a kernel patch *or* new atop 2 compiled from 
source with netatop kernel module.

Ciao,
-- 
Martin 'Helios' Steigerwald - http://www.Lichtvoll.de
GPG: 03B0 0D6C 0040 0710 4AFA  B82F 991B EAAC A599 84C7

signature.asc
Description: This is a digitally signed message part.


Re: Mysterius Download

2014-02-28 Thread Jerry Stuckle

On 2/28/2014 8:06 AM, Markos wrote:

Hi Everybody,

The browser takes a long time to open the pages but the applet
properties of network connection shows a high download rate.

But I'm not downloading anything!

How to find out which program is doing this mysterious download and
block this download?

I'm using Debian Squeeze.

Thank you,
Markos




How fast is your connection (real speed, not claimed speed)?

You are downloading; your browser must download the html for the page, 
any other uri's which are called (i.e. external css and/or javascript 
files), all images...


On a slow network, this can take a while; meanwhile the network 
connection will show downloading.


Jerry


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/5310a802.1070...@attglobal.net