July 22, 20178 yr I have a router flashed with Tomato firmware, which allows me to see bandwidth for each device connected to it. Lately, unRAID is always uploading something. It's not much; over the last 18 hours, it's uploaded about 45MB, at an average rate of .72 KB/sec. I've turned off all dockers, but it still uploads. It's not any VM, as they get their own IP address, which I can track separately. I can't think of anything I want to upload, nor any reason unRAID should be doing it in the background, so I'm stumped. The only think I can think of is a virus or something else unwanted doing this. How can I find and stop the source of this unwanted activity?
July 22, 20178 yr iotop from the command line. Probably have to get it from nerd pack Sent from my LG-D852 using Tapatalk
July 22, 20178 yr Do you have Windows Explorer windows open for server SMB shares. There is synchronization that takes place between SMB folders and open explorer windows that might account for this I/O. Even if such folders are not open, if you have logged in to the server (which might happen automatically), there may be handshakes that are taking place.
July 22, 20178 yr Author 2 hours ago, Squid said: iotop from the command line. Probably have to get it from nerd pack Thanks, downloading now... 31 minutes ago, bjp999 said: Do you have Windows Explorer windows open for server SMB shares. There is synchronization that takes place between SMB folders and open explorer windows that might account for this I/O. Even if such folders are not open, if you have logged in to the server (which might happen automatically), there may be handshakes that are taking place. not during this whole time, that would be the longest handshake ever, I think
July 22, 20178 yr Author 2 hours ago, Squid said: iotop from the command line. Probably have to get it from nerd pack I think I'm doing it wrong. I installed the nerd pack, then opened Putty... root@media:~# iotop -bash: iotop: command not found
July 22, 20178 yr 45 minutes ago, JustinChase said: Thanks, downloading now... not during this whole time, that would be the longest handshake ever, I think They keep in constant connection so that the files lists are synchronized. Like I said, things could be happening behind the scenes. With the nerd pack, you have to install it but then have to individually select the tools you want to install. Not immeidately obvious, but click on the plugin icon, and up will pop a list of all of the tools, and you can install each one individually.
July 22, 20178 yr 3 hours ago, JustinChase said: I think I'm doing it wrong. I installed the nerd pack, then opened Putty... root@media:~# iotop -bash: iotop: command not found meant iftop, and you do need to set nerd pack to install it
July 23, 20178 yr Author Yeah, I finally figured out I had to install the packages not just nerd pack. I have since installed and ran iftop, and it started showing information, then froze. My whole network has since crawled to a stop, and I not I can't even restart unRAID from the GUI. I also tried shutdown -r now (twice) but unRAID seems to just be hung up. Sadly, I have to crawl up into the attic to hard reset the server (it's been "hung" for 30 minutes now). I guess I'll just live with the unknown uploading after getting it restarted.
September 29, 20178 yr Author Well, I finally got back around to checking on this, and here's what I get with iftop. I checked whois for the IP address that shows and I get Centrilogic, Inc, and it maps to Toronto. I suspect this has to do with PIA, but none of my dockers should be doing anything right now, SABnzbd and Deluge are both paused during the day, so why might they be constantly (albiet very slowly) communicating with PIA servers?
Archived
This topic is now archived and is closed to further replies.