This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is my bandwidth being hogged? What is wrong? Please help.

0

Hello! I did a speed test which revealed that my particular device, at least, was getting 17 Mb/s download and ~30 Mb/s upload when the ISP is supposedly delivering 50/50. The other devices are not being currently used (at least by people) other than this computer right now. I looked on the IPv4 endpoints and I see a lot of IPs that a) are not on my router device list and b) do not follow the numbering schema of my router. While I am a fair hand around computers, I am new to the networking scene. (Lets say I have an introductory level understanding). Are these other IP's in the endpoints bandwidth hogs or some kind of invisible service? Is my ISP just not putting out what it should be?

Thanks.

Image is hosted here as the embed does not seem to work: http://imgur.com/a/pEFqM

Alternate: https://ibb.co/crzDhk

It is a comparison of my router device list with the IPv4 tab of the Wireshark Enpoints menu, sorted by Byte traffic.

asked 17 Jun '17, 08:01

Rye_Bread's gravatar image

Rye_Bread
11114
accept rate: 0%

1

If you're wondering about the 'other IP addresses' you should start looking into IP addressing basics. IP address wise there's nothing out of the ordinary here.

(17 Jun '17, 09:36) Jaap ♦

One Answer:

0

The IP addresses you've marked in the screen shot are normal 'special purpose' addresses:

Regarding the bandwidth: There are a lot of influencing factors which can affect the bandwidth (e.g. latency, window size, IPS peerings etc.). => Therefore more data is needed to make a point.

answered 17 Jun '17, 09:35

Uli's gravatar image

Uli
9031515
accept rate: 29%

Ah, thanks. Latency is 10 ms. All windows (On this device) are generally 1920x1080 (native resoultion). I don't have a lot of tabs open that would chew up bandwidth either.

As for the IPS peerings I am not sure. I have fiber optics directly from Verizon and I haven't been able to dig up any information on how to view it it, or locate any information on if I can do this with wireshark itself.

So, I may be right in assuming the ISP is throttling us?

(17 Jun '17, 10:47) Rye_Bread
1

window size here has nothing to do with screen resolution and thus data volume; it is a property of network transport protocol called TCP which affects effective transmission speed. Combination of small window size (roughly the size of receiving buffer) and big delay on the path between endpoints makes transmission slow even if enough bandwidth is available.

(17 Jun '17, 12:44) sindy