[[APi]TheMan]

I use MenuMeters to monitor my network interfaces and the bandwidth coming across them, but every once in a while I get abnormal transfer rates when I am not doing anything at all.

As we speak I've got 800KB/sec incoming, and I'm not doin' anything in particular. My network is capable of 800KB/sec speeds, but I usually only see those speeds when I'm downloading something (IRC, another computer on the LAN, direct from Apple, etc).

The normal responses to this type of inquiry would be to check netstat or lsof -i, but I've analyzed their output numerous times and I see nothing abnormal. I guess next time I see this happening I should check my disk space to see if anything is actually being downloaded.

Thanks.

[Moonray]

Perhaps like this http://forums.macnn.com/90/mac-os-x/174793/constant-stream-of-incoming-packets/?

-

[kampl]

I'd use Ntop in this situation, while it's happening of course, just to get a baseline of what may be going on. From there I would probably use tcpdump to see what the traffic is from the sources that seem to be generating the majority of it based on ntop output. I can get more specific regarding syntax if you would like. The man pages are pretty thorough for these apps.

You may need need to use tcpdump to log traffic if you are not around often enough to see it on the fly, which you can then replay through ntop, or tcpdump or ethereal etc. Whatever your traffic analyzer of choice may happen to be.

[suthercd]

Could it be a bump in MenuMeters?

Craig