View Full Version : AT+T Wireless DSL Service Suspended (Cap'd out) new info in post 24
We have a mobile user that we've set up on AT+T (Cingular) Wireless that had his service suspended.
The account he has is a 5GB/month account. Unfortunately they no longer have an unlimited account.
The user's usage shot up quite a bit this month.
Last month, he used about 2.5~2.7 gigs for the whole month.
This month he had has 5 gigs in 2 weeks time and now has been cut off by the ISP.
It seems he's using his allocated usage 4x faster then the previous month.
(I think he used approximately the same 2.5gb for the previous months as well.)
Now I've asked him, his supervisor, the office manager, etc about his usage, they say he is about as busy as he has been the previous months.
So....
I took the drive out and scanned it with Norton Endpoint via my laptop.
No issues.
I've updated his Symantec Corp 10 NAV to the Endpoint and running a scan on it right now.
So far nothing.
The only thing I found was FF was set to use a Proxy (but no address was specified in the proxy setting)
I thought he might have been nabbed by the Google thing but I don't see any of the "Tells" from that or the "SD Virus" either.
I'll throw MWB on it and SAS next and scan with them...and post those results.
I do know that he just leaves his connection on, but that shouldn't count towards his transfer cap of 5GB's...Right?
R1Budha
08-17-2010, 10:00 AM
explicitly ask him ig he's streaming any video content.
i've usually found that is the most likely cuplprit.
especially if they are travelling and are using netflix/hulu/etc to keep up to date on anything.
explicitly ask him ig he's streaming any video content.
i've usually found that is the most likely cuplprit.
especially if they are travelling and are using netflix/hulu/etc to keep up to date on anything.
I've asked him point blank...nope not doing that...
So now I'm looking for a little freeware app that will track how much they send and receive over the connection...
Any good apps??
R1Budha
08-17-2010, 10:30 AM
http://www.softperfect.com/products/networx/
I did find this installed on the laptop (http://puzzle-xp-championship-3000.software.informer.com/)...but at first blush via google...it seems OK...didn't get hits from spyware/malware sites.
riptide_slick
08-17-2010, 11:02 AM
Why install a third party utility if you don't have to? The info is already available; you just need to view it - either programatically (i.e. query WMI) or by using the Performance Monitor (its in Vista and Windows 7; if it's WinXP, IIRC you can just copy the executable from a Win2K3 box.)
http://www.softperfect.com/products/networx/
Giving it a try now...pretty cool thanks.
Why install a third party utility if you don't have to? The info is already available; you just need to view it - either programatically (i.e. query WMI) or by using the Performance Monitor (its in Vista and Windows 7; if it's WinXP, IIRC you can just copy the executable from a Win2K3 box.)
I iz dumb :sadwalk: (It's XP btw)
The application btw has a nice daily, weekly, monthly graph utility, etc.
vivahate
08-17-2010, 11:33 AM
ntop - there's a port for windows. Great app
http://www.ntop.org/overview.html
Jeffbx
08-17-2010, 04:49 PM
I second video streaming... that's about the only way you can max those things out. Or he's running bit torrents & doesn't want to say anything. 5GB in 2 weeks is a ridiculous amount of data - even 2.5GB in a month is out of the ordinary. If he's just doing office work, I'd expect to see his monthly usage at about 1GB or less.
Is his WAP secured, and is he sharing it with his family? Could be the traffic isn't coming from his laptop.
I second video streaming... that's about the only way you can max those things out. Or he's running bit torrents & doesn't want to say anything. 5GB in 2 weeks is a ridiculous amount of data - even 2.5GB in a month is out of the ordinary. If he's just doing office work, I'd expect to see his monthly usage at about 1GB or less.
Is his WAP secured, and is he sharing it with his family? Could be the traffic isn't coming from his laptop.
The user is a "Mobile" office...he gets prints/plans/etc to look at jobs as he's a construction superintendent...but the spike of 4x the rate in what he's been doing is...?:scratch:
Does the broadband modem have a hub feature?
If so, someone may have connected and used his connection without his knowledge. :dontknow:
Does the broadband modem have a hub feature?
If so, someone may have connected and used his connection without his knowledge. :dontknow:
The connection is a built in dsl modem card that uses (AT+T) cellular network for connectivity.
I guess he could turn on ICS and share it out (did this as temp measure in a different office for 3 days) but, I doubt it.
He's got a mac and a macbook and dsl at home...so...:dontknow:
greenmeansgoooo
08-17-2010, 05:14 PM
I second video streaming... that's about the only way you can max those things out. Or he's running bit torrents & doesn't want to say anything. 5GB in 2 weeks is a ridiculous amount of data - even 2.5GB in a month is out of the ordinary. If he's just doing office work, I'd expect to see his monthly usage at about 1GB or less.
Is his WAP secured, and is he sharing it with his family? Could be the traffic isn't coming from his laptop.
my guess is bit torrents.
NetMeter (http://www.metal-machine.de/readerror/index.php?action=tpmod;dl) similar to DU meter, but free.
Calvy
08-17-2010, 05:46 PM
for the iPhone, i was under the impression if you went over the monthly cap you could purchase more data in blocks. Can you not do this with a mobile broadband card?
Rebound
08-17-2010, 06:30 PM
Doesn't his device auto-switch to wifi in the office and at home?
for the iPhone, i was under the impression if you went over the monthly cap you could purchase more data in blocks. Can you not do this with a mobile broadband card?
Nope...that's all they offer...now a different user has an unlimited account...I'm pondering switching the sim cards...if they are the same size...
Doesn't his device auto-switch to wifi in the office and at home?
That would be nice...but no the dell control point software (HATE IT btw) does not do that for you automatically...'least not that I've seen...
greenmeansgoooo
08-17-2010, 06:51 PM
Nope...that's all they offer...now a different user has an unlimited account...I'm pondering switching the sim cards...if they are the same size...
That would be nice...but no the dell control point software (HATE IT btw) does not do that for you automatically...'least not that I've seen...
Yep, you could do that and do some log tracking to see what the majority of his data is being used on.
Just thinking about what chewed up 5Gb.
Windows Updates? :scratchh:
Email attachments? :scratch:
Jeffbx
08-18-2010, 04:52 AM
Even if he's doing the first windows update ever & installing a service pack, at most that's going to be a few hundred MB.
Yeah, that's even a worse situation if it's a cellular broadband card. It's got to be streaming video or torrents. Did you check to see if he has torrent software installed?
Last time I had a guy go above 2GB on his cellular broadband it turns out he had been streaming the Master's Tournament all day for several days.
Even if he's doing the first windows update ever & installing a service pack, at most that's going to be a few hundred MB.
Yeah, that's even a worse situation if it's a cellular broadband card. It's got to be streaming video or torrents. Did you check to see if he has torrent software installed?
Last time I had a guy go above 2GB on his cellular broadband it turns out he had been streaming the Master's Tournament all day for several days.
lol. people watch golf?
Even if he's doing the first windows update ever & installing a service pack, at most that's going to be a few hundred MB.
Yeah, that's even a worse situation if it's a cellular broadband card. It's got to be streaming video or torrents. Did you check to see if he has torrent software installed?
Last time I had a guy go above 2GB on his cellular broadband it turns out he had been streaming the Master's Tournament all day for several days.
i wonder if it was world cup he had on...:scratch:
I didn't find any torrent software...the worst thing I did fine were a few tracking cookies that every box has on them.
The box was fully updated at time of deployment (April 2010)
Jeffbx
08-18-2010, 09:40 AM
lol. people watch golf?
White male sales executives seem to...
Personally I'd rather watch grass grow.
greenmeansgoooo
08-18-2010, 11:29 AM
men and their balls!
what if he is using the broadband card on his own personal laptop???
* new info...
I had AT+T turn on the card...etc...
I loaded the netwrks program and today the laptop was just in a total download mode...
I had it on the land line...no issues....
Then switched to the cell card...no issues until...
I fired up outlook 2k7
I don't think it was outlook it's self (as later I killed it and the lappy was still downloading)
we have efax on this thing as well...but that converts a fax to pdf and sends it via pop3 to the user's account...
I thought something was trying to update...either adobe acrobat or flash...not sure
It seems once I ran the adobe update (pretty sure it was flash) then things got in control again.
I have since went to find any file or files that were megs in size...nope...none today.
I rebooted the thing tried outlook, opened up attachments, etc...no issues. wtf?
I don't get it.
greenmeansgoooo
08-18-2010, 04:59 PM
seems an updater (adobe flash?) was in a download loop and not saving any contents, so it kept downloading as the file was never saving and completing.
Jeffbx
08-19-2010, 05:45 AM
Check the outlook rules? Anything stupid in there, like forwarding mail to himself after he receives it? Of course the server would catch that pretty quick...
Maybe close down everything you can thing of & then run a netstat -b to see what connections are active. Maybe that'll give you a hint? Or better, install Netlimiter 2 Monitor (http://www.netlimiter.com/download.php) - that'll show all active connections.
seems an updater (adobe flash?) was in a download loop and not saving any contents, so it kept downloading as the file was never saving and completing.
I'm thinking this was it...
Check the outlook rules? Anything stupid in there, like forwarding mail to himself after he receives it? Of course the server would catch that pretty quick...
Maybe close down everything you can thing of & then run a netstat -b to see what connections are active. Maybe that'll give you a hint? Or better, install Netlimiter 2 Monitor (http://www.netlimiter.com/download.php) - that'll show all active connections.
I'll keep this in mind if the lappy gets on my bench again...I redeployed it this morning...
Thanks for the links/tips:bulb: