Search for utility to identify source of WWW traffic

[Ralf Mardorf]

On Sat, 31 Mar 2018 11:38:23 -0400, Mark Frank wrote:
>On Sat, Mar 31, 2018 at 11:31 AM, Mark Frank <mark at markanderika.com>
>wrote:
>
>>
>>
>> On Sat, Mar 31, 2018 at 11:08 AM, Bret Busby <bret.busby at gmail.com>
>> wrote:
>>
>>> Hello.
>>>
>>> I currently have two web browsers open (not firefox), and their
>>> download managers show no downloads occurring.
>>>
>>> But, something has beeen downloading data at around 200-300kBps, for
>>> over an hour.
>>>
>>> Is a utility available, that can identify what application(s) is/are
>>> downloading data, and, what URL's are being accessed for the
>>> downloads being performed?
>>>
>>>
>> netstat -tcvp
>>
>
>
>On second thought maybe to catch udp traffic also:
>
>netstat -tucvp

Or take a "snapshot" by running

  netstat -taupen

Note, in this exceptional case running

  sudo netstat -tcvp
  sudo netstat -tucvp
  sudo netstat -taupen

could be necessary.

Another useful tool is wireshark.

Too funny, my spam filter is smarter than I'm. It marked Bret's mail as
spam, while I never taught bogofilter to do this. I marked his mail as
ham and now I answer a reply to Bret's mail.

How did you notice that something downloaded 200-300kBps for over an
hour? Do you constantly run and watch

  nload -u m

or a thing like that?

Bret, please, after updating all your personal data, excluding your app
configs, wipe out everything and make a default Ubuntu (flavour)
install, then do a regular update and start to configure the apps
again. Run such a system for a while, before you access your personal
data and before you start to customize your Linux install.

If something strange should happen again, when using a default Ubuntu
(flavour), download and run https://tails.boum.org/ for testing purpose.

Since you ignore all well-intended help, that doesn't fit to what you
like to hear, it seems to be wasting time trying to help you.