RevHardt wrote:64-bit 17.1 Rebecca Cinnamon here on wireless-only network.
IP traffic monitor (iptraf) shows endless new entries of:
Code: Select all
UDP (1368 bytes) from 10.2.2.56:20004 to 224.11.16.28:6000 (src HWaddr 00233ea930e8) on wlan0
This is eating away at my bandwidth without mercy.
I have another machine running 17 Qiana KDE on the same wireless network, and that has no such activity.
How do I stop this, or at least pinpoint the offending process?
Install nethogs
In a Terminal, run: ifconfig -a
One of the devices you will see is:
lo Link encap:Local Loopback
The Purpose of Loopback
When a network interface is disconnected--for example, when an Ethernet port is unplugged or Wi-Fi is turned off or not associated with an access point--no communication on that interface is possible, not even communication between your computer and itself. The loopback interface does not represent any actual hardware, but exists so applications running on your computer can always connect to servers on the same machine.
The other devices you will see are either ethernet, wireless or VPN.
In my case, tun0 for VPN and wlan0 for wireless
Now if you use a VPN you actually have to monitor the VPN device over the wireless or ethernet.
So in my case, in terminal I type: sudo nethogs tun0
If I didn't have a vpn, in my case I would type: sudo nethogs wlan0
That's how its done.
FYI, in my case all responsible processes are wine based.
To find the process responsible, look for the same PIDs in System Monitor which I have reassigned to show up upon Control-Alt-Delete.
You can also sort the processes in System Monitor by PID which makes finding the culprit even faster.
To output to file, use this exact command otherwise the PID will be hard to see: sudo nethogs -d 5 tun0 | sed 's/[^[:print:][:cntrl:]]//g' > output.txt
The -d 5 is critical. Replace tun0 with whatever you are capturing.